Proxmox 配置nat ipv4 dhcp 和独立ipv6配置成功了，但是网络卡顿

63次阅读

共计 3960 个字符，预计需要花费 10 分钟才能阅读完成。

/etc/sysctl.conf

net.ipv4.tcp_congestion_control = bbr
net.core.default_qdisc = fq
net.ipv4.ip_forward = 1

复制代码

/etc/dhcp/dhcpd.conf

subnet 192.168.18.0 netmask 255.255.255.0 {
range 192.168.18.100 192.168.18.150;
#dns 3
option domain-name-servers 8.8.8.8, 8.8.4.4;
option subnet-mask 255.255.255.0;
option routers 192.168.18.1;
option broadcast-address 192.168.18.255;
default-lease-time 1111;
max-lease-time 500020;
}
ddns-update-style none;

复制代码

/etc/default/isc-dhcp-server

INTERFACESv4=”vmbr1″

复制代码

/etc/network/interfaces

auto lo
iface lo inet loopback
auto eth0
iface eth0 inet manual
iface eth1 inet manual
auto vmbr0
iface vmbr0 inet static
address 123.123.123.123/25
gateway 123.123.123.1
bridge-ports eth0
bridge-stp off
bridge-fd 0
dns-nameservers 8.8.8.8 8.8.4.4
hwaddress 0c:c4:7a:71:42:ee
bridge-sftp off
iface vmbr0 inet6 static
address 2400:2222:630:80e6::1/64
gateway 2400:2222:630:80e6:ff:ff:ff:ff
auto vmbr1
iface vmbr1 inet static
address 192.168.18.1/24
bridge-ports none
bridge-stp off
bridge-fd 0
post-up echo 1 > /proc/sys/net/ipv4/ip_forward
post-up iptables -t nat -A POSTROUTING -s ‘192.168.18.0/24’ -o vmbr0 -j MASQUERADE
post-down iptables -t nat -D POSTROUTING -s ‘192.168.18.0/24’ -o vmbr0 -j MASQUERADE

复制代码

配置完以上，发现小鸡网络都通，【ping（v4 和 v6）五次花费很久】

[email protected]:~# ping ipv6.google.com
PING ipv6.google.com(hkg07s38-in-x0e.1e100.net (2404:2222:4005:812::200e)) 56 data bytes
64 bytes from hkg07s38-in-x0e.1e100.net (2404:2222:4005:812::200e): icmp_seq=1 ttl=121 time=2.18 ms
64 bytes from hkg07s38-in-x0e.1e100.net (2404:2222:4005:812::200e): icmp_seq=2 ttl=121 time=2.15 ms
64 bytes from hkg07s38-in-x0e.1e100.net (2404:2222:4005:812::200e): icmp_seq=3 ttl=121 time=2.20 ms
^C64 bytes from 2404:6800:4005:812::200e: icmp_seq=4 ttl=121 time=2.18 ms
— ipv6.google.com ping statistics —
4 packets transmitted, 4 received, 0% packet loss, time 15049ms

复制代码

[email protected]:~# ping baidu.com
PING baidu.com (39.156.66.10) 56(84) bytes of data.
64 bytes from 39.156.66.10 (39.156.66.10): icmp_seq=1 ttl=44 time=42.2 ms
64 bytes from 39.156.66.10 (39.156.66.10): icmp_seq=2 ttl=44 time=42.3 ms
64 bytes from 39.156.66.10 (39.156.66.10): icmp_seq=3 ttl=44 time=42.3 ms
64 bytes from 39.156.66.10 (39.156.66.10): icmp_seq=4 ttl=44 time=42.2 ms
^C64 bytes from 39.156.66.10: icmp_seq=5 ttl=44 time=42.2 ms
— baidu.com ping statistics —
5 packets transmitted, 5 received, 0% packet loss, time 20206ms
rtt min/avg/max/mdev = 42.168/42.249/42.349/0.061 ms

复制代码

小鸡没上加上 vmbr1 的时候母鸡自动分配的 ipv6 网络访问正常，现在趴了别人的贴子，发现出现了以上问题
请问我配置哪里有问题呀？

网友回复：

注册： [email protected]:~# ping 192.168.18.1 PING 192.168.18.1 (192.168.18.1) 56(84) bytes of data. 64 bytes from 192.168.18.1: icmp_seq=1 ttl=64 time=0.127 ms 64 bytes from 192.168.18.1: icmp_seq=2 ttl=64 time=0.126 ms 64 bytes from 192.168.18.1: icmp_seq=3 ttl=64 time=0.118 ms 64 bytes from 192.168.18.1: icmp_seq=4 ttl=64 time=0.171 ms ^C — 192.168.18.1 ping statistics — 4 packets transmitted, 4 received, 0% packet loss, time 3004ms rtt min/avg/max/mdev = 0.118/0.135/0.171/0.020 ms 复制代码 ping 母鸡反应倒是挺迅速的

古藤君： [email protected]:~# ip a 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: ens18: mtu 1500 qdisc pfifo_fast state UP group default qlen 1000 link/ether aa:b0:dc:dd:43:af brd ff:ff:ff:ff:ff:ff altname enp0s18 inet6 2400:2222:630:80e6:a8b0:dcff:fedd:43af/64 scope global dynamic mngtmpaddr valid_lft 2591481sec preferred_lft 604281sec inet6 fe80::a8b0:dcff:fedd:43af/64 scope link valid_lft forever preferred_lft forever 3: eth1: mtu 1500 qdisc pfifo_fast state UP group default qlen 1000 link/ether 4e:da:8b:d0:ae:a5 brd ff:ff:ff:ff:ff:ff altname enp0s19 altname ens19 inet 192.168.18.102/24 brd 192.168.18.255 scope global dynamic eth1 valid_lft 690sec preferred_lft 690sec inet6 fe80::4cda:8bff:fed0:aea5/64 scope link valid_lft forever preferred_lft forever 复制代码

古藤君： https://lw.al/archives/pve-install-problem/ 参考参考我现在就一直用 pve

古藤君：好的我去看看。。。我怀疑我这个要么转发要么 dhcp 出问题了 ==================== 看完了我得不是 CT 没法 PVE 上配置 IP

supervps： kvm 一样啊直接静态 ip

古藤君：没卡顿过

supervps：没有卡顿过 +1，可能我只是手动配，没有用 dhcp

正文完