Пошагово: создаем виртуальные сервера

1. Подготовим конфиг по умолчанию (пока что разделим все ресурсы поровну на 4 виртуальных сервера):

[root@mx1 ~]# vzsplit -n 4 -f default
The optimal swap space size is 1985 Mb, twice bigger than the RAM size
Config /etc/vz/conf/ve-default.conf-sample was created


2. Создаем и настраиваем первый виртуальный сервер:

[root@mx1 ~]# vzctl create 101 --ostemplate centos-4-x86_64-minimal
Creating VE private area (centos-4-x86_64-minimal)
Performing postcreate actions
VE private area was created

Автозапуск:
[root@mx1 ~]# vzctl set 101 --onboot yes --save
Saved parameters for VE 101

Имя хоста:
[root@mx1 ~]# vzctl set 101 --hostname proxy.lindex.ru --save
Saved parameters for VE 101

"Проброс" интерфейса eth1 в VE101
[root@mx1 ~]# vzctl set 101 --netdev_add eth1 --save
Saved parameters for VE 101

Добавляем "локальный" интерфейс (для общения со своей локальной сетью и другими VE):

[root@mx1 ~]# vzctl set 101 --ipadd 172.16.0.2 --save
Adding IP address(es): 172.16.0.2
Configure meminfo: 49152
Saved parameters for VE 101


Заходим в VE101, настраиваем интерфейс и маршруты и проверяем работу сети:

[root@mx1 ~]# vzctl enter 101
entered into VE 101

[root@proxy /]# ifconfig
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:562958543487006 errors:0 dropped:0 overruns:0 frame:0
TX packets:1195818864963437 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1688892809938396 (1.5 PiB) TX bytes:1886351287 (1.7 GiB)

venet0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:127.0.0.1 P-t-P:127.0.0.1 Bcast:0.0.0.0 Mask:255.255.255.255
UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)

venet0:0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:172.16.0.2 P-t-P:172.16.0.2 Bcast:172.16.0.2 Mask:255.255.255.255
UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1

[root@proxy /]# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.0.2.0 * 255.255.255.0 U 0 0 0 venet0
169.254.0.0 * 255.255.0.0 U 0 0 0 venet0
default 192.0.2.1 0.0.0.0 UG 0 0 0 venet0

[root@proxy /]# ping 172.16.0.222
PING 172.16.0.222 (172.16.0.222) 56(84) bytes of data.
64 bytes from 172.16.0.222: icmp_seq=0 ttl=127 time=27.6 ms
64 bytes from 172.16.0.222: icmp_seq=1 ttl=127 time=0.136 ms

--- 172.16.0.222 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 0.136/13.879/27.622/13.743 ms, pipe 2
[root@proxy /]# ifconfig eth1 78.107.3.98/28 up
[root@proxy /]# ifconfig
eth1 Link encap:Ethernet HWaddr 00:04:23:D1:4D:F9
inet addr:78.107.3.98 Bcast:78.107.3.111 Mask:255.255.255.240
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:281021 errors:0 dropped:0 overruns:0 frame:0
TX packets:37609 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:22663307 (21.6 MiB) TX bytes:6182088 (5.8 MiB)
Base address:0x3000 Memory:b8920000-b8940000

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:562958543487008 errors:0 dropped:0 overruns:0 frame:0
TX packets:1195818864963439 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1688892809938593 (1.5 PiB) TX bytes:1886351484 (1.7 GiB)

venet0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:127.0.0.1 P-t-P:127.0.0.1 Bcast:0.0.0.0 Mask:255.255.255.255
UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1
RX packets:42 errors:0 dropped:0 overruns:0 frame:0
TX packets:43 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:15064 (14.7 KiB) TX bytes:3077 (3.0 KiB)

venet0:0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:172.16.0.2 P-t-P:172.16.0.2 Bcast:172.16.0.2 Mask:255.255.255.255
UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1

[root@proxy /]# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
78.107.3.96 * 255.255.255.240 U 0 0 0 eth1
192.0.2.0 * 255.255.255.0 U 0 0 0 venet0
169.254.0.0 * 255.255.0.0 U 0 0 0 venet0
default 192.0.2.1 0.0.0.0 UG 0 0 0 venet0
[root@proxy /]# route del default
[root@proxy /]# route add default gw 78.107.3.97
[root@proxy /]# route add -net 172.16.0.0/24 dev venet0
[root@proxy /]# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
78.107.3.96 * 255.255.255.240 U 0 0 0 eth1
172.16.0.0 * 255.255.255.0 U 0 0 0 venet0
192.0.2.0 * 255.255.255.0 U 0 0 0 venet0
169.254.0.0 * 255.255.0.0 U 0 0 0 venet0
default 78.107.3.97 0.0.0.0 UG 0 0 0 eth1
[root@proxy /]# ping 172.16.0.222
PING 172.16.0.222 (172.16.0.222) 56(84) bytes of data.
64 bytes from 172.16.0.222: icmp_seq=0 ttl=128 time=1.18 ms
64 bytes from 172.16.0.222: icmp_seq=1 ttl=127 time=0.212 ms

--- 172.16.0.222 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 0.212/0.699/1.186/0.487 ms, pipe 2
[root@proxy /]# ping 78.107.3.97
PING 78.107.3.97 (78.107.3.97) 56(84) bytes of data.
64 bytes from 78.107.3.97: icmp_seq=0 ttl=255 time=1.07 ms
64 bytes from 78.107.3.97: icmp_seq=1 ttl=255 time=14.4 ms

--- 78.107.3.97 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1000ms
rtt min/avg/max/mdev = 1.072/7.736/14.400/6.664 ms, pipe 2
[root@proxy /]# ping ya.ru
PING ya.ru (213.180.204.8) 56(84) bytes of data.
64 bytes from ya.ru (213.180.204.8): icmp_seq=0 ttl=56 time=2.56 ms
64 bytes from ya.ru (213.180.204.8): icmp_seq=1 ttl=56 time=8.81 ms
64 bytes from ya.ru (213.180.204.8): icmp_seq=2 ttl=56 time=2.35 ms

--- ya.ru ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2003ms
rtt min/avg/max/mdev = 2.355/4.576/8.811/2.996 ms, pipe 2
[root@proxy /]# ping 195.90.159.66
PING 195.90.159.66 (195.90.159.66) 56(84) bytes of data.
64 bytes from 195.90.159.66: icmp_seq=0 ttl=52 time=4.63 ms
64 bytes from 195.90.159.66: icmp_seq=1 ttl=52 time=4.29 ms

--- 195.90.159.66 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 4.290/4.461/4.632/0.171 ms, pipe 2