Re: IPv4 addresses clash / jails not working after reboot…

Boris Samorodov bsam at passap.ru
Fri Mar 8 07:48:49 UTC 2013


08.03.2013 03:22, Jamie Gritton пишет:

> You're allowed to have the same address in multiple jails, but only in
> the case of jails that have one address (i.e. one IPv4 address in this
> case). Jails with multiple IP addresses can't share any of those
> addresses with other jails. I don't know why it should work once and
> then not work later though.

>From JAIL(8):
-----
     Jails have a set a core parameters, and kernel modules can add
their own
     jail parameters.  The current set of available parameters can be
     retrieved via “sysctl -d security.jail.param”.  Any parameters not set
     will be given default values, often based on the current environment.
     The core parameters are:
[...]
ip4.addr
[...]
             It is only possible to start multiple jails with
             the same IP address, if none of the jails has more than
this sin‐
             gle overlapping IP address assigned to itself.
-----

My interpratation of the mannual page is: this restrict is valid only
when ip4.addr sysctl is used. Otherwise this restriction should be
documented at other section (say, at DESCRIPTION).

-- 
WBR, Boris Samorodov (bsam)
FreeBSD Committer, http://www.FreeBSD.org The Power To Serve


More information about the freebsd-jail mailing list