Hello, again! It's been a several months since I last had time to explore OmniOS, and it's taken me the better part of the day to remember where I was. Unfortunately, I've hit a small roadblock (which I know I got past before).

I am running OmniOS on Vult (with set diable-hv_vmbus) and I want to set up a zone to run nginx. I followed the instructions under "Creating a simple zone" but I have no network connection within the zone.

(I've seen this before but I can't remember how I resolved it last time.)

I guess my first question is: is the IP address set with allowed-address an IP address in a local/virtual network (the example uses 10.0.0.154/24)?

Or should it be an IP address on the real network (matching that assigned to the physical interface underlying the virtual interface)?

Ideally, for this experiment, I (think I) would like to run nginx in a zone connected to a virtual network, and then map the port in the global zone to the port in the zone running nginx.

Unless there is a more obvious (preferred) way of achieving this

Something like antranigv.am/posts/2024/02/omnios-mirror-one

But yes, if you're on a cloud provider who only give you one IP address then you create an etherstub for an internal net and hang the zones of that

with nat for outbound traffic, and either port forwarding via ipf or a reverse proxy like haproxy or nginx in the global zone