The web server located in the openvz container is not available

Question

openvpn

Good afternoon!

The third day I'm trying to set up the configuration: I want a working environment to appear after connecting via VPN to the server, namely: git, a continuous integration server + several build agents, a bug tracker, an artifact manager + environments where dev- and stable- versions of the system will be raised. Now it all works on many servers of different configurations, everything is spread out and somehow not organized, it is inconvenient to manage. Servers (8 pieces) are all rented from hatzner, some are weak and virtual, some are EQ4. Now I took two EX4S (32 GB of memory), installed Debian 6 minimal, OpenVZ, OpenvVPN, bind9 on them. I raised the first containers, installed a ci-server (in fact, this is a web application, it works under Tomcat), I installed a bug tracker in another container (also under Tomcat). A strange thing began to happen here: what is a bug tracker, that the ci-server is _almost_ invisible from the client machine via http. Pings to containers are going great, I can access them via ssh, the Internet is available from them. Yes, and it happens that the response also jumps over http. But 99% of requests hang stupidly and do not respond. And the remaining 1% sometimes give an answer, but very slowly. If you go to the host machine for containers and try to go with it through a terminal browser (elinks), everything works from it. Firewalls - no. Containers are lifted on the 192.168.2.0 network. And it is the only one forwarded via OpenVPN. I suspect something is wrong with the OpenVPN/iptables settings, but I can't figure out what. but very slowly. If you go to the host machine for containers and try to go with it through a terminal browser (elinks), everything works from it. Firewalls - no. Containers are lifted on the 192.168.2.0 network. And it is the only one forwarded via OpenVPN. I suspect something is wrong with the OpenVPN/iptables settings, but I can't figure out what. but very slowly. If you go to the host machine for containers and try to go with it through a terminal browser (elinks), everything works from it. Firewalls - no. Containers are lifted on the 192.168.2.0 network. And it is the only one forwarded via OpenVPN. I suspect something is wrong with the OpenVPN/iptables settings, but I can't figure out what.

Thank you.

Answer 1

You should look at the logs. Start with http server and openvpn, end with tcpdump.