From owner-freebsd-questions@freebsd.org Tue Aug 29 14:54:09 2017 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0D74CDDD4B2 for ; Tue, 29 Aug 2017 14:54:09 +0000 (UTC) (envelope-from olivier@mauras.ch) Received: from smtp.mauras.ch (smtp.mauras.ch [163.172.199.81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id C0915653F2 for ; Tue, 29 Aug 2017 14:54:08 +0000 (UTC) (envelope-from olivier@mauras.ch) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=mauras.ch; s=20160502; h=Message-ID:References:In-Reply-To:Subject:To:From:Date: Content-Transfer-Encoding:Content-Type:MIME-Version:Sender:Reply-To:Cc: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=GuyE1ugJkBmNfg9XPQgB5elkDdvbYe+EeZVWS/h8QPs=; b=BUBj8hntc2hgtcptA+pPX8LYed shVrvLWQMqwdiD0l8MaXQGVsAxSIWNE6oyMziGwFJt6FDZAgNepkBLjEwX7dwaGkUHVEGl5lOMUy3 OJ2WuHrR8996aKTsjQfeTPVjADbkUXjUusWdxEDD4CZ8hrqqTqUM8MbQV8/l/1sEvxfY=; Received: from www.mauras.ch ([195.154.39.207] helo=mail.mauras.ch) by smtp.mauras.ch with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.89) (envelope-from ) id 1dmhrn-0004CE-SE for freebsd-questions@freebsd.org; Tue, 29 Aug 2017 16:51:48 +0200 MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Tue, 29 Aug 2017 16:51:44 +0200 From: Olivier Mauras To: freebsd-questions@freebsd.org Subject: Re: [Crosspost] Host losing network connectivity when jail is up after 21 minutes In-Reply-To: <20170824110313.677fac26fcc6537499aeafbb@mauras.ch> References: <20170824110313.677fac26fcc6537499aeafbb@mauras.ch> Message-ID: X-Sender: olivier@mauras.ch User-Agent: Roundcube Webmail/1.2.4 X-Authenticated-Sender: olivier@mauras.ch X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Aug 2017 14:54:09 -0000 Just to note that the issue has been solved by binding the jails on cloned lo1 instead of the main interface. Regards, -O. On 2017-08-24 11:03, Olivier Mauras wrote: > Sorry for crossposting from > https://groups.google.com/a/hardenedbsd.org/forum/#!topic/users/tADY5vVqxew > I hope it's acceptable > > Hello, > > I have HardenedBSD 11.1 installed as a KVM guest with static route and > a single public IP directly routed to internet by my provider's > gateway. > I have two jails running on this guest, one running an sshd instance > the other one a powerdns-recursor instance. Both jails are on a > private subnet NATed by PF and running HBSD 11.1 as well. > > If any of the jail is running, the host will lose network connectivity > after ~21 minutes, and there is no relevant event in the logs - like > really nothing - that could help pinpoint where the issue is coming > from. > When I stop the jail service, network connectivity gets back > immediately. When I start the jail service again, network is still up > for the next 21 minutes... > > I've tried switching network interface driver from virtio to e1000 > without any success as the behaviour is still the same. > > Would someone have an idea to help tracking down this issue? > > Thanks, > -O.