[Users] Re: Routing all VZ's traffic through a VPN on the host?

[Aleksandar Ivanisevic]

Benjamin Henrion <bh at udev.org> writes:

> Hi,
>
> I am looking on how to route all the traffic coming from the
> containers through a VPN interface which is on the hardware node.
>
> Any idea?
>
> I am using venet, not veth interfaces.

Just use a regular source route. The exact recipe will depend on your
config.

Be aware though that there is a bug (or a "feature" if you ask ovz people)
that will prevent you for using an ipsec on a HN unless you
specifically turn policy routing off **in a container**.

http://bugzilla.openvz.org/show_bug.cgi?id=1554


-- 
Ti si arogantan, prepotentan i peglaš vlastitu frustraciju. -- Ivan
Tišljar, hr.comp.os.linux