53 kvm及libvirt、使用virsh管理kvm虚拟机、网络虚拟化技术基础、网络名称空间netns用法详解

时间：2017-01-01 14:29:05 阅读：785 评论：0 收藏：0 [点我收藏+]

标签：kvm virsh netns

01 kvm及libvirt

[root@node1 ~]# yum install libvirt libvirt-client python-virtinst virt-manager virt-install -y

[root@node1 ~]# yum -y install qemu-kvm

[root@node1 ~]# systemctl start libvirtd.service

#创建桥

[root@node1 ~]# virsh iface-bridge eno16777736 br0 --no-stp

[root@node1 ~]# systemctl restart network.service

[root@node1 ~]# brctl show

bridge name bridge id STP enabled interfaces

br0 8000.000c29ba0d2f no eno16777736

virbr0 8000.52540067a9f3 yes virbr0-nic

#创建虚拟机

[root@node1 ~]# virt-manager

02 使用virsh管理kvm虚拟机

[root@node1 ~]# yum -y install virt-viewer

[root@node1 ~]# mkdir /images/centos -p

[root@node1 ~]# virt-install -n centos6.7 -r 512 --vcpus=2,maxvcpus=4 --pxe --disk /images/centos/centos6.7.qcow2,size=120,format=qcow2,bus=virtio,sparse=yes --network bridge=br0,model=virtio --force

[root@node1 ~]# virsh list

Id 名称状态

----------------------------------------------------

3 centos6.7 running

[root@node1 ~]# virt-viewer 3

#强制关机

[root@node1 ~]# virsh destroy 1

[root@node1 ~]# ls /etc/libvirt/qemu

centos6.7.xml networks

#根据xml文件创建虚拟机

[root@node1 ~]# virsh create /etc/libvirt/qemu/centos6.7.xml

域 centos6.7 被创建从 /etc/libvirt/qemu/centos6.7.xml

#创建的虚拟机已经运行了

[root@node1 ~]# virsh list

Id 名称状态

----------------------------------------------------

2 centos6.7 running

#删除虚拟机

[root@node1 ~]# virsh undefine centos6.7 --remove-all-storage

域 centos6.7 已经被取消定义

已删除卷 ‘vda‘(/images/centos/centos6.7.qcow2)。

[root@node1 ~]# virt-install -n centos6.7 -r 512 --vcpus=2,maxvcpus=4 --pxe --disk /images/centos/centos6.7.qcow2,size=120,format=qcow2,bus=virtio,sparse=yes --network bridge=br0,model=virtio --force --nographics

[root@node1 ~]# mkdir /images/cirros

[root@node1 ~]# mv cirros-no_cloud-0.3.0-i386-disk.img /images/cirros/

#试运行操作

[root@node1 ~]# virt-install -n cirros -r 128 --disk /images/cirros/cirros-no_cloud-0.3.0-i386-disk.img --import --dry-run

WARNING 未检测到操作系统虚拟机性能可能会受到影响。使用 --os-variant 选项指定操作系统以获得最佳性能。

试运行成功完成

[root@node1 ~]# virt-install -n cirros -r 128 --disk /images/cirros/cirros-no_cloud-0.3.0-i386-disk.img --import

[root@node1 ~]# virt-install -n cirros -r 128 --vcpus=1,maxvcpus=4 --disk /images/cirros/cirros-no_cloud-0.3.0-i386-disk.img --network bridge=br0,model=virtio --import --serial=pty --console=pty --nographics

#创建磁盘映像文件

[root@node1 ~]# qemu-img create -f qcow2 -o size=20G,preallocation=metadata /images/cirros/second.qcow2

#查看磁盘映像文件信息

[root@node1 ~]# qemu-img info /images/cirros/second.qcow2

image: /images/cirros/second.qcow2

file format: qcow2

virtual size: 20G (21474836480 bytes)

disk size: 4.1M

cluster_size: 65536

Format specific information:

compat: 1.1

lazy refcounts: false

#把新增磁盘添加到正在运行的虚拟机上

[root@node1 ~]# virsh attach-disk 8 /images/cirros/second.qcow2 vda --targetbus virtio

成功附加磁盘

#拆除正在运行的虚拟机上的硬盘

[root@node1 ~]# virsh detach-disk 8 vda

成功分离磁盘

#向虚拟机上添加网络接口

[root@node1 ~]# virsh attach-interface 8 bridge virbr0

成功附加接口

#拆除虚拟机上网络接口

[root@node1 ~]# virsh detach-interface 8 bridge --mac 52:54:00:E7:4D:25

成功分离接口

#查看虚拟机的定义信息

[root@node1 ~]# virsh dumpxml cirros

#查看域CPU个数

[root@node1 ~]# virsh vcpucount 8

最大值配置 4

最大值 live 4

当前配置 1

当前 live 1

#查看域CPU信息

[root@node1 ~]# virsh vcpuinfo 8

VCPU: 0

CPU: 1

状态 running

CPU 时间 111.0s

CPU关系: yyyy

#配置域中vcpu

[root@node1 ~]# virsh setvcpus 8 2

[root@node1 ~]# virsh vcpuinfo 8

VCPU: 0

CPU: 0

状态 running

CPU 时间 111.5s

CPU关系: yyyy

VCPU: 1

CPU: 0

状态 running

CPU关系: yyyy

#查看域磁盘位置

[root@node1 ~]# virsh domblklist 8

目标源

------------------------------------------------

hda /images/cirros/cirros-no_cloud-0.3.0-i386-disk.img

#查看域网络信息

[root@node1 ~]# virsh domiflist 8

接口类型源型号 MAC

-------------------------------------------------------

vnet0 bridge br0 virtio 52:54:00:c1:01:14

#查看域信息

[root@node1 ~]# virsh dominfo 8

Id: 8

名称 cirros

UUID: fc2c006f-f336-47cd-a6d8-b5f474167b88

OS 类型 hvm

状态 running

CPU 2

CPU 时间 124.5s

最大内存 131072 KiB

使用的内存 131072 KiB

持久是

自动启动禁用

管理的保存否

安全性模式 none

安全性 DOI 0

#显示节点信息物理机

[root@node1 ~]# virsh nodeinfo

CPU 型号 x86_64

CPU 4

CPU 频率 2128 MHz

CPU socket 1

每个 socket 的内核数 4

每个内核的线程数 1

NUMA 单元 1

内存大小 8388084 KiB

#显示URI

[root@node1 ~]# virsh uri

qemu:///system

#显示版本号

[root@node1 ~]# virsh version

根据库编译libvirt 2.0.0

使用库libvirt 2.0.0

使用的 API: QEMU 2.0.0

运行管理程序: QEMU 1.5.3

#列出接口

[root@node1 ~]# virsh iface-list

名称状态 MAC 地址

---------------------------------------------------

br0 活动 00:0c:29:ba:0d:2f

lo 活动 00:00:00:00:00:00

#列出过滤器

[root@node1 ~]# virsh nwfilter-list

UUID 名称

------------------------------------------------------------------

13c88621-6473-4883-bb5b-ea25f0b0f8db allow-arp

792262fd-29f0-4fd6-8ae3-f7f320774dc1 allow-dhcp

6175cb41-2c50-420a-b779-9bdbeaa62cb9 allow-dhcp-server

4ac77628-0369-48b0-8544-bd694fd12994 allow-incoming-ipv4

7ee5bef8-9170-4320-ba3b-bc4d6d5fe6d8 allow-ipv4

e712460b-3505-4ded-9b99-5ee2ea54c417 clean-traffic

2fea4106-6c3e-49c5-8297-871bf7656992 no-arp-ip-spoofing

2ce69339-59ba-4002-81fe-d650e9045927 no-arp-mac-spoofing

4fefe23c-b1fc-4daf-be95-4844d03ff006 no-arp-spoofing

7d6d1c55-d6ad-44c8-aab1-50de8988db81 no-ip-multicast

dfd46e5c-37a5-4465-aec9-38c3e8747d87 no-ip-spoofing

7f86b7e0-9873-4174-83ad-2853af8853cb no-mac-broadcast

c396c95a-e1a4-44ad-95a2-c1c76bcca423 no-mac-spoofing

d6681b9e-cfc5-483e-9f71-170cb4cecf13 no-other-l2-traffic

c7031d28-5e60-4345-ac88-a9b72acc48fb no-other-rarp-traffic

37140bfc-595f-43f6-a831-fe223106794c qemu-announce-self

26522e96-db13-43ad-9bdb-6c29fbcfb9b6 qemu-announce-self-rarp

03 网络虚拟化技术基础

#查看802.1q模块信息

[root@node1 ~]# modinfo 8021q

filename: /lib/modules/3.10.0-327.el7.x86_64/kernel/net/8021q/8021q.ko

version: 1.8

license: GPL

alias: rtnl-link-vlan

rhelversion: 7.2

srcversion: 2E63BD725D9DC11C7DA6190

depends: mrp,garp

intree: Y

vermagic: 3.10.0-327.el7.x86_64 SMP mod_unload modversions

signer: CentOS Linux kernel signing key

sig_key: 79:AD:88:6A:11:3C:A0:22:35:26:33:6C:0F:82:5B:8A:94:29:6A:B3

sig_hashalgo: sha256

#加载模块

[root@node1 ~]# modprobe 8021q

[root@node1 ~]# yum install vconfig

04 网络名称空间netns用法详解

配置环境

node1: 192.168.1.131 CentOS Linux release 7.2

node2: 192.168.1.132 CentOS Linux release 7.2

[root@node1 ~]# ip netns add r1

[root@node1 ~]# ip netns add r2

[root@node1 ~]# ip netns list

[root@node1 ~]# ip netns exec r1 ifconfig -a

lo: flags=8<LOOPBACK> mtu 65536

loop txqueuelen 0 (Local Loopback)

RX packets 0 bytes 0 (0.0 B)

RX errors 0 dropped 0 overruns 0 frame 0

TX packets 0 bytes 0 (0.0 B)

TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

[root@node1 ~]# ip netns exec r1 route -n

[root@node1 ~]# ip netns exec r1 ifconfig lo 127.0.0.1/8 up

[root@node1 ~]# ip netns exec r1 ifconfig

lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536

inet 127.0.0.1 netmask 255.0.0.0

inet6 ::1 prefixlen 128 scopeid 0x10<host>

loop txqueuelen 0 (Local Loopback)

RX packets 0 bytes 0 (0.0 B)

RX errors 0 dropped 0 overruns 0 frame 0

TX packets 0 bytes 0 (0.0 B)

TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

[root@node1 ~]# ip netns exec r2 ifconfig -a

lo: flags=8<LOOPBACK> mtu 65536

loop txqueuelen 0 (Local Loopback)

RX packets 0 bytes 0 (0.0 B)

RX errors 0 dropped 0 overruns 0 frame 0

TX packets 0 bytes 0 (0.0 B)

TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

#查看R1 iptables规则

[root@node1 ~]# ip netns exec r1 iptables -L -n

Chain INPUT (policy ACCEPT)

target prot opt source destination

Chain FORWARD (policy ACCEPT)

target prot opt source destination

Chain OUTPUT (policy ACCEPT)

target prot opt source destination

#创建物理桥

[root@node1 ~]# brctl addbr br-ex

[root@node1 ~]# ip link set br-ex up

[root@node1 ~]# ip addr del 192.168.1.131/24 dev eno16777736;ip addr add 192.168.1.131/24 dev br-ex;brctl addif br-ex eno16777736

#创建内部桥

[root@node1 ~]# brctl addbr br-in

[root@node1 ~]# ip link set br-in up

#开启路由转发功能

[root@node1 ~]# vim /etc/sysctl.conf

添加

net.ipv4.ip_forward = 1

[root@node1 ~]# sysctl -p

net.ipv4.ip_forward = 1

#创建一对虚拟网卡

[root@node1 ~]# ip link add veth1.1 type veth peer name veth1.2

[root@node1 ~]# ip link show

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

2: eno16777736: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master br-ex state UP mode DEFAULT qlen 1000

link/ether 00:0c:29:50:27:c4 brd ff:ff:ff:ff:ff:ff

3: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN mode DEFAULT

link/ether 52:54:00:43:0d:84 brd ff:ff:ff:ff:ff:ff

4: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc pfifo_fast master virbr0 state DOWN mode DEFAULT qlen 500

link/ether 52:54:00:43:0d:84 brd ff:ff:ff:ff:ff:ff

5: br-ex: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT

link/ether 00:0c:29:50:27:c4 brd ff:ff:ff:ff:ff:ff

6: br-in: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN mode DEFAULT

link/ether ca:89:b9:dc:cd:7d brd ff:ff:ff:ff:ff:ff

7: veth1.2@veth1.1: <BROADCAST,MULTICAST,M-DOWN> mtu 1500 qdisc noop state DOWN mode DEFAULT qlen 1000

link/ether c6:66:c7:32:06:e1 brd ff:ff:ff:ff:ff:ff

8: veth1.1@veth1.2: <BROADCAST,MULTICAST,M-DOWN> mtu 1500 qdisc noop state DOWN mode DEFAULT qlen 1000

link/ether 5e:58:78:10:ed:a0 brd ff:ff:ff:ff:ff:ff

[root@node1 ~]# ip link set veth1.1 netns r1

[root@node1 ~]# ip link set veth1.2 netns r2

[root@node1 ~]# ip link show

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

2: eno16777736: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master br-ex state UP mode DEFAULT qlen 1000

link/ether 00:0c:29:50:27:c4 brd ff:ff:ff:ff:ff:ff

3: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN mode DEFAULT

link/ether 52:54:00:43:0d:84 brd ff:ff:ff:ff:ff:ff

4: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc pfifo_fast master virbr0 state DOWN mode DEFAULT qlen 500

link/ether 52:54:00:43:0d:84 brd ff:ff:ff:ff:ff:ff

5: br-ex: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT

link/ether 00:0c:29:50:27:c4 brd ff:ff:ff:ff:ff:ff

6: br-in: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN mode DEFAULT

link/ether ca:89:b9:dc:cd:7d brd ff:ff:ff:ff:ff:ff

[root@node1 ~]# ip netns exec r1 ifconfig -a

lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536

inet 127.0.0.1 netmask 255.0.0.0

inet6 ::1 prefixlen 128 scopeid 0x10<host>

loop txqueuelen 0 (Local Loopback)

RX packets 0 bytes 0 (0.0 B)

RX errors 0 dropped 0 overruns 0 frame 0

TX packets 0 bytes 0 (0.0 B)

TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

veth1.1: flags=4098<BROADCAST,MULTICAST> mtu 1500

ether 5e:58:78:10:ed:a0 txqueuelen 1000 (Ethernet)

RX packets 0 bytes 0 (0.0 B)

RX errors 0 dropped 0 overruns 0 frame 0

TX packets 0 bytes 0 (0.0 B)

TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

[root@node1 ~]# ip netns exec r2 ifconfig -a

lo: flags=8<LOOPBACK> mtu 65536

loop txqueuelen 0 (Local Loopback)

RX packets 0 bytes 0 (0.0 B)

RX errors 0 dropped 0 overruns 0 frame 0

TX packets 0 bytes 0 (0.0 B)

TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

veth1.2: flags=4098<BROADCAST,MULTICAST> mtu 1500

ether c6:66:c7:32:06:e1 txqueuelen 1000 (Ethernet)

RX packets 0 bytes 0 (0.0 B)

RX errors 0 dropped 0 overruns 0 frame 0

TX packets 0 bytes 0 (0.0 B)

TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

#更改R1网卡显示名

[root@node1 ~]# ip netns exec r1 ip link set veth1.1 name eth0

[root@node1 ~]# ip netns exec r1 ip link show

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

8: eth0@if7: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT qlen 1000

link/ether 5e:58:78:10:ed:a0 brd ff:ff:ff:ff:ff:ff link-netnsid 1

#更改R2网卡显示名

[root@node1 ~]# ip netns exec r2 ip link set veth1.2 name eth0

[root@node1 ~]# ip netns exec r1 ip link show

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

8: eth0@if7: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT qlen 1000

link/ether 5e:58:78:10:ed:a0 brd ff:ff:ff:ff:ff:ff link-netnsid 1

#配置R1、R2的IP

[root@node1 ~]# ip netns exec r1 ifconfig eth0 10.0.1.1/24 up

[root@node1 ~]# ip netns exec r2 ifconfig eth0 10.0.1.2/24 up

#测试R1、R2联通性

[root@node1 ~]# ip netns exec r1 ping 10.0.1.1

PING 10.0.1.1 (10.0.1.1) 56(84) bytes of data.

64 bytes from 10.0.1.1: icmp_seq=1 ttl=64 time=0.314 ms

64 bytes from 10.0.1.1: icmp_seq=2 ttl=64 time=0.057 ms

--- 10.0.1.1 ping statistics ---

2 packets transmitted, 2 received, 0% packet loss, time 1000ms

rtt min/avg/max/mdev = 0.057/0.185/0.314/0.129 ms

[root@node1 ~]# ip netns exec r1 ping 10.0.1.2

PING 10.0.1.2 (10.0.1.2) 56(84) bytes of data.

64 bytes from 10.0.1.2: icmp_seq=1 ttl=64 time=0.191 ms

64 bytes from 10.0.1.2: icmp_seq=2 ttl=64 time=0.072 ms

[root@node1 ~]# route add default gw 192.168.1.254

[root@node1 ~]# yum -y install qemu-kvm

[root@node1 ~]# modprobe kvm

[root@node1 ~]# mkdir -p /images/cirros

[root@node1 ~]# cd /images/cirros/

[root@node1 cirros]# ls

cirros-no_cloud-0.3.0-i386-disk.img

[root@node1 cirros]# cp cirros-no_cloud-0.3.0-i386-disk.img test1.qcow2

[root@node1 cirros]# cp cirros-no_cloud-0.3.0-i386-disk.img test2.qcow2

[root@node1 cirros]# cd

[root@node1 ~]# vim /etc/qemu-ifup

#!/bin/bash

bridge=br-in

if [ -n "$1" ];then

ip link set $1 up

brctl addif $bridge $1

[ $? -eq 0 ] && exit 0 || exit 1

else

echo "Error: no interface specified."

exit 1

[root@node1 ~]# chmod +x /etc/qemu-ifup

[root@node1 ~]# bash -n /etc/qemu-ifup

[root@node1 ~]# ln -s /usr/libexec/qemu-kvm /usr/bin/

#安装第一个虚拟机

[root@node1 ~]# qemu-kvm -m 128 -smp 1 -name vm1 -drive file=/images/cirros/test1.qcow2,if=virtio,media=disk -net nic,macaddr=52:54:00:aa:bb:cc -net tap,ifname=vif1.0,script=/etc/qemu-ifup --nographic

#安装第二个虚拟机

[root@node1 ~]# qemu-kvm -m 128 -smp 1 -name vm2 -drive file=/images/cirros/test2.qcow2,if=virtio,media=disk -net nic,macaddr=52:54:00:aa:bb:dd -net tap,ifname=vif2.0,script=/etc/qemu-ifup --nographic

[root@node1 ~]# brctl show

bridge name bridge id STP enabled interfaces

br-ex 8000.000c295027c4 no eno16777736

br-in 8000.1a39688cf1ea no vif1.0

vif2.0

[root@node1 ~]# ip netns delete r1

[root@node1 ~]# ip netns delete r2

[root@node1 ~]# ip netns list

[root@node1 ~]# ip netns add r1

[root@node1 ~]# ip link show

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

2: eno16777736: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master br-ex state UP mode DEFAULT qlen 1000

link/ether 00:0c:29:50:27:c4 brd ff:ff:ff:ff:ff:ff

3: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN mode DEFAULT

link/ether 52:54:00:43:0d:84 brd ff:ff:ff:ff:ff:ff

4: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc pfifo_fast master virbr0 state DOWN mode DEFAULT qlen 500

link/ether 52:54:00:43:0d:84 brd ff:ff:ff:ff:ff:ff

5: br-ex: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT

link/ether 00:0c:29:50:27:c4 brd ff:ff:ff:ff:ff:ff

6: br-in: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT

link/ether 1a:39:68:8c:f1:ea brd ff:ff:ff:ff:ff:ff

10: vif1.0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master br-in state UNKNOWN mode DEFAULT qlen 500

link/ether 6a:02:16:30:9c:82 brd ff:ff:ff:ff:ff:ff

11: vif2.0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master br-in state UNKNOWN mode DEFAULT qlen 500

link/ether 1a:39:68:8c:f1:ea brd ff:ff:ff:ff:ff:ff

[root@node1 ~]# ip link add rinr type veth peer name rins

[root@node1 ~]# ip link show

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

2: eno16777736: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master br-ex state UP mode DEFAULT qlen 1000

link/ether 00:0c:29:50:27:c4 brd ff:ff:ff:ff:ff:ff

3: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN mode DEFAULT

link/ether 52:54:00:43:0d:84 brd ff:ff:ff:ff:ff:ff

4: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc pfifo_fast master virbr0 state DOWN mode DEFAULT qlen 500

link/ether 52:54:00:43:0d:84 brd ff:ff:ff:ff:ff:ff

5: br-ex: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT

link/ether 00:0c:29:50:27:c4 brd ff:ff:ff:ff:ff:ff

6: br-in: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT

link/ether 1a:39:68:8c:f1:ea brd ff:ff:ff:ff:ff:ff

10: vif1.0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master br-in state UNKNOWN mode DEFAULT qlen 500

link/ether 6a:02:16:30:9c:82 brd ff:ff:ff:ff:ff:ff

11: vif2.0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master br-in state UNKNOWN mode DEFAULT qlen 500

link/ether 1a:39:68:8c:f1:ea brd ff:ff:ff:ff:ff:ff

12: rins@rinr: <BROADCAST,MULTICAST,M-DOWN> mtu 1500 qdisc noop state DOWN mode DEFAULT qlen 1000

link/ether 7e:d4:16:e7:22:cc brd ff:ff:ff:ff:ff:ff

13: rinr@rins: <BROADCAST,MULTICAST,M-DOWN> mtu 1500 qdisc noop state DOWN mode DEFAULT qlen 1000

link/ether da:cf:c3:b5:7b:8a brd ff:ff:ff:ff:ff:ff

[root@node1 ~]# ip link set rinr up

[root@node1 ~]# ip link set rins up

[root@node1 ~]# brctl addif br-in rins

[root@node1 ~]# brctl show

bridge name bridge id STP enabled interfaces

br-ex 8000.000c295027c4 no eno16777736

br-in 8000.1a39688cf1ea no rins

vif1.0

vif2.0

[root@node1 ~]# ip link set rinr netns r1

#R1网卡改名

[root@node1 ~]# ip netns exec r1 ifconfig -a

lo: flags=8<LOOPBACK> mtu 65536

loop txqueuelen 0 (Local Loopback)

RX packets 0 bytes 0 (0.0 B)

RX errors 0 dropped 0 overruns 0 frame 0

TX packets 0 bytes 0 (0.0 B)

TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

rinr: flags=4098<BROADCAST,MULTICAST> mtu 1500

ether da:cf:c3:b5:7b:8a txqueuelen 1000 (Ethernet)

RX packets 8 bytes 648 (648.0 B)

RX errors 0 dropped 0 overruns 0 frame 0

TX packets 8 bytes 648 (648.0 B)

TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

[root@node1 ~]# ip netns exec r1 ip link set rinr name eth0

[root@node1 ~]# ip netns exec r1 ifconfig -a

eth0: flags=4098<BROADCAST,MULTICAST> mtu 1500

ether da:cf:c3:b5:7b:8a txqueuelen 1000 (Ethernet)

RX packets 8 bytes 648 (648.0 B)

RX errors 0 dropped 0 overruns 0 frame 0

TX packets 8 bytes 648 (648.0 B)

TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

lo: flags=8<LOOPBACK> mtu 65536

loop txqueuelen 0 (Local Loopback)

RX packets 0 bytes 0 (0.0 B)

RX errors 0 dropped 0 overruns 0 frame 0

TX packets 0 bytes 0 (0.0 B)

TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

[root@node1 ~]# ip netns exec r1 ip link set eth0 up

[root@node1 ~]# ip netns exec r1 ip link show

1: lo: <LOOPBACK> mtu 65536 qdisc noop state DOWN mode DEFAULT

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

13: eth0@if12: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT qlen 1000

link/ether da:cf:c3:b5:7b:8a brd ff:ff:ff:ff:ff:ff link-netnsid 0

[root@node1 ~]# ip netns exec r1 ifconfig eth0 10.0.1.254/24 up

[root@node1 ~]# ip netns exec r1 ifconfig

eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500

inet 10.0.1.254 netmask 255.255.255.0 broadcast 10.0.1.255

inet6 fe80::d8cf:c3ff:feb5:7b8a prefixlen 64 scopeid 0x20<link>

ether da:cf:c3:b5:7b:8a txqueuelen 1000 (Ethernet)

RX packets 8 bytes 648 (648.0 B)

RX errors 0 dropped 0 overruns 0 frame 0

TX packets 16 bytes 1296 (1.2 KiB)

TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

#配置第一台虚拟机IP

$ sudo su -

# ifconfig eth0 10.0.1.1/24 up

# ping 10.0.1.254

PING 10.0.1.254 (10.0.1.254): 56 data bytes

64 bytes from 10.0.1.254: seq=0 ttl=64 time=159.302 ms

64 bytes from 10.0.1.254: seq=1 ttl=64 time=5.182 ms

# route add default gw 10.0.1.254

#配置第二台虚拟机IP

$ sudo su -

# ifconfig eth0 10.0.1.2/24 up

# ping 10.0.1.254

PING 10.0.1.254 (10.0.1.254): 56 data bytes

64 bytes from 10.0.1.254: seq=0 ttl=64 time=11.109 ms

64 bytes from 10.0.1.254: seq=1 ttl=64 time=4.452 ms

--- 10.0.1.254 ping statistics ---

2 packets transmitted, 2 packets received, 0% packet loss

round-trip min/avg/max = 4.452/7.780/11.109 ms

# route add default gw 10.0.1.254

[root@node1 ~]# ip link add rexr type veth peer name rexs

[root@node1 ~]# ip link show

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

2: eno16777736: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master br-ex state UP mode DEFAULT qlen 1000

link/ether 00:0c:29:50:27:c4 brd ff:ff:ff:ff:ff:ff

3: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN mode DEFAULT

link/ether 52:54:00:43:0d:84 brd ff:ff:ff:ff:ff:ff

4: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc pfifo_fast master virbr0 state DOWN mode DEFAULT qlen 500

link/ether 52:54:00:43:0d:84 brd ff:ff:ff:ff:ff:ff

5: br-ex: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT

link/ether 00:0c:29:50:27:c4 brd ff:ff:ff:ff:ff:ff

6: br-in: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT

link/ether 1a:39:68:8c:f1:ea brd ff:ff:ff:ff:ff:ff

10: vif1.0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master br-in state UNKNOWN mode DEFAULT qlen 500

link/ether 6a:02:16:30:9c:82 brd ff:ff:ff:ff:ff:ff

11: vif2.0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master br-in state UNKNOWN mode DEFAULT qlen 500

link/ether 1a:39:68:8c:f1:ea brd ff:ff:ff:ff:ff:ff

12: rins@if13: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master br-in state UP mode DEFAULT qlen 1000

link/ether 7e:d4:16:e7:22:cc brd ff:ff:ff:ff:ff:ff link-netnsid 0

14: rexs@rexr: <BROADCAST,MULTICAST,M-DOWN> mtu 1500 qdisc noop state DOWN mode DEFAULT qlen 1000

link/ether c2:6a:a0:96:0e:27 brd ff:ff:ff:ff:ff:ff

15: rexr@rexs: <BROADCAST,MULTICAST,M-DOWN> mtu 1500 qdisc noop state DOWN mode DEFAULT qlen 1000

link/ether ce:6d:e3:9e:d1:1c brd ff:ff:ff:ff:ff:ff

[root@node1 ~]# brctl addif br-ex rexs

[root@node1 ~]# ip link set rexs up

[root@node1 ~]# brctl show

bridge name bridge id STP enabled interfaces

br-ex 8000.000c295027c4 no eno16777736

rexs

br-in 8000.1a39688cf1ea no rins

vif1.0

vif2.0

[root@node1 ~]# ip link set rexr netns r1

[root@node1 ~]# ip netns exec r1 ip link set rexr name eth1

[root@node1 ~]# ip netns exec r1 ifconfig eth1 192.168.1.134/24 up

[root@node1 ~]# ip netns exec r1 ifconfig

eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500

inet 10.0.1.254 netmask 255.255.255.0 broadcast 10.0.1.255

inet6 fe80::d8cf:c3ff:feb5:7b8a prefixlen 64 scopeid 0x20<link>

ether da:cf:c3:b5:7b:8a txqueuelen 1000 (Ethernet)

RX packets 27 bytes 2174 (2.1 KiB)

RX errors 0 dropped 0 overruns 0 frame 0

TX packets 32 bytes 2696 (2.6 KiB)

TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

eth1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500

inet 192.168.1.134 netmask 255.255.255.0 broadcast 192.168.1.255

inet6 fe80::cc6d:e3ff:fe9e:d11c prefixlen 64 scopeid 0x20<link>

ether ce:6d:e3:9e:d1:1c txqueuelen 1000 (Ethernet)

RX packets 33 bytes 4560 (4.4 KiB)

RX errors 0 dropped 0 overruns 0 frame 0

TX packets 8 bytes 648 (648.0 B)

TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

[root@node1 ~]# ip netns exec r1 ping 192.168.1.1

PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.

64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=1.72 ms

64 bytes from 192.168.1.1: icmp_seq=2 ttl=64 time=0.453 ms

#测试虚拟机网络

[root@node1 ~]# tcpdump -i vif1.0 -nn icmp

tcpdump: WARNING: vif1.0: no IPv4 address assigned

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode

listening on vif1.0, link-type EN10MB (Ethernet), capture size 65535 bytes

09:43:35.448999 IP 10.0.1.1 > 192.168.1.1: ICMP echo request, id 43520, seq 186, length 64

09:43:36.456217 IP 10.0.1.1 > 192.168.1.1: ICMP echo request, id 43520, seq 187, length 64

2 packets captured

2 packets received by filter

0 packets dropped by kernel

[root@node1 ~]# tcpdump -i rins -nn icmp

tcpdump: WARNING: rins: no IPv4 address assigned

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode

listening on rins, link-type EN10MB (Ethernet), capture size 65535 bytes

09:43:06.250500 IP 10.0.1.1 > 192.168.1.1: ICMP echo request, id 43520, seq 157, length 64

09:43:07.257803 IP 10.0.1.1 > 192.168.1.1: ICMP echo request, id 43520, seq 158, length 64

09:43:08.265838 IP 10.0.1.1 > 192.168.1.1: ICMP echo request, id 43520, seq 159, length 64

3 packets captured

3 packets received by filter

0 packets dropped by kernel

[root@node1 ~]# ip netns exec r1 tcpdump -i eth0 -nn icmp

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode

listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes

09:45:20.239901 IP 10.0.1.1 > 192.168.1.1: ICMP echo request, id 43520, seq 290, length 64

09:45:21.246984 IP 10.0.1.1 > 192.168.1.1: ICMP echo request, id 43520, seq 291, length 64

09:45:22.254115 IP 10.0.1.1 > 192.168.1.1: ICMP echo request, id 43520, seq 292, length 64

3 packets captured

3 packets received by filter

0 packets dropped by kernel

[root@node1 ~]# ip netns exec r1 tcpdump -i eth1 -nn icmp

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode

listening on eth1, link-type EN10MB (Ethernet), capture size 65535 bytes

09:46:18.629898 IP 10.0.1.1 > 192.168.1.1: ICMP echo request, id 43520, seq 348, length 64

09:46:19.637394 IP 10.0.1.1 > 192.168.1.1: ICMP echo request, id 43520, seq 349, length 64

09:46:20.644763 IP 10.0.1.1 > 192.168.1.1: ICMP echo request, id 43520, seq 350, length 64

3 packets captured

3 packets received by filter

0 packets dropped by kernel

#从192.168.1.1上抓包

[root@DNS-Server ~]# tcpdump -i eth0 -nn icmp

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode

listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes

09:53:52.872389 IP 192.168.1.1 > 114.114.114.114: ICMP 192.168.1.1 udp port 16588 unreachable, length 66

09:53:52.893624 IP 10.0.1.1 > 192.168.1.1: ICMP echo request, id 44288, seq 5, length 64

09:53:52.893646 IP 192.168.1.1 > 10.0.1.1: ICMP echo reply, id 44288, seq 5, length 64

09:53:53.901275 IP 10.0.1.1 > 192.168.1.1: ICMP echo request, id 44288, seq 6, length 64

09:53:53.901299 IP 192.168.1.1 > 10.0.1.1: ICMP echo reply, id 44288, seq 6, length 64

5 packets captured

5 packets received by filter

0 packets dropped by kernel

#在R1上添加iptables NAT路由转发

[root@node1 ~]# ip netns exec r1 iptables -t nat -A POSTROUTING -s 10.0.1.0/24 ! -d 10.0.1.0/24 -j SNAT --to-source 192.168.1.134[root@node1 ~]# ip netns exec r1 iptables -t nat -L -n

Chain PREROUTING (policy ACCEPT)

target prot opt source destination

Chain INPUT (policy ACCEPT)

target prot opt source destination

Chain OUTPUT (policy ACCEPT)

target prot opt source destination

Chain POSTROUTING (policy ACCEPT)

target prot opt source destination

SNAT all -- 10.0.1.0/24 !10.0.1.0/24 to:192.168.1.134

测试网络成功

再次抓包

[root@node1 ~]# tcpdump -i rins -nn icmp

tcpdump: WARNING: rins: no IPv4 address assigned

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode

listening on rins, link-type EN10MB (Ethernet), capture size 65535 bytes

10:00:11.768476 IP 10.0.1.1 > 192.168.1.132: ICMP echo request, id 45312, seq 5, length 64

10:00:11.769866 IP 192.168.1.132 > 10.0.1.1: ICMP echo reply, id 45312, seq 5, length 64

10:00:12.781633 IP 10.0.1.1 > 192.168.1.132: ICMP echo request, id 45312, seq 6, length 64

10:00:12.782421 IP 192.168.1.132 > 10.0.1.1: ICMP echo reply, id 45312, seq 6, length 64

4 packets captured

4 packets received by filter

0 packets dropped by kernel

#在R1上配置dhcp

[root@node1 ~]# ip netns exec r1 dnsmasq --dhcp-range 10.0.1.100,10.0.1.120

#虚拟机自动获得IP地址

# udhcpc -R

udhcpc (v1.18.5) started

Sending discover...

Sending select for 10.0.1.120...

Lease of 10.0.1.120 obtained, lease time 3600

deleting routers

route: SIOCDELRT: No such process

adding dns 10.0.1.254

# ifconfig

eth0 Link encap:Ethernet HWaddr 52:54:00:AA:BB:DD

inet addr:10.0.1.120 Bcast:10.0.1.255 Mask:255.255.255.0

inet6 addr: fe80::5054:ff:feaa:bbdd/64 Scope:Link

UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

RX packets:29 errors:0 dropped:0 overruns:0 frame:0

TX packets:32 errors:0 dropped:0 overruns:0 carrier:0

collisions:0 txqueuelen:1000

RX bytes:2838 (2.7 KiB) TX bytes:3476 (3.3 KiB)

lo Link encap:Local Loopback

inet addr:127.0.0.1 Mask:255.0.0.0

inet6 addr: ::1/128 Scope:Host

UP LOOPBACK RUNNING MTU:16436 Metric:1

RX packets:0 errors:0 dropped:0 overruns:0 frame:0

TX packets:0 errors:0 dropped:0 overruns:0 carrier:0

collisions:0 txqueuelen:0

RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

# route -n

Kernel IP routing table

Destination Gateway Genmask Flags Metric Ref Use Iface

0.0.0.0 10.0.1.254 0.0.0.0 UG 0 0 0 eth0

10.0.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0

[root@node1 ~]# ip netns exec r1 killall dnsmasq

[root@node1 ~]# ip netns exec r1 dnsmasq -F 10.0.1.151,10.0.1.160 --dhcp-option=option:router,10.0.1.254

# udhcpc -R

udhcpc (v1.18.5) started

Sending discover...

Sending select for 10.0.1.158...

Lease of 10.0.1.158 obtained, lease time 3600

deleting routers

route: SIOCDELRT: No such process

adding dns 10.0.1.254

# route -n

Kernel IP routing table

Destination Gateway Genmask Flags Metric Ref Use Iface

0.0.0.0 10.0.1.254 0.0.0.0 UG 0 0 0 eth0

10.0.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0

本文出自 “追梦” 博客，请务必保留此出处http://sihua.blog.51cto.com/377227/1887978

53 kvm及libvirt、使用virsh管理kvm虚拟机、网络虚拟化技术基础、网络名称空间netns用法详解

标签：kvm virsh netns

原文地址：http://sihua.blog.51cto.com/377227/1887978

踩

(0)

评论一句话评论（0）

分享档案

更多>

2021年07月29日 (22)
2021年07月28日 (40)
2021年07月27日 (32)
2021年07月26日 (79)
2021年07月23日 (29)
2021年07月22日 (30)
2021年07月21日 (42)
2021年07月20日 (16)
2021年07月19日 (90)
2021年07月16日 (35)

周排行