Hostname (FQDN).......huh?

[eliminatrix]

Hi All,

I'm very, very new to Proxmox - a colleague at work recommended it to me but I have a question and he's gone campin!
Can someone please explain the Hostname (FQDN) in the management network configuration / set up please? Why do I need a domain name?
I'm really lost - do I have to go and buy / register a domain name?

Thanks!

 

[chotaire]

Unless you are trying to get a certificate using ACME, you should be fine making up a FQDN using a domain that does not need to be / can not be registered, e.g. IETF has reserved the following top level domains for documentation or testing purposes:

.example
.invalid
.test

.localhost has also been reserved but should be avoided. .local has not been reserved but is widely used for such scenarios, I personally would prefer this one.

Alternatively, you can get free subdomains and free domains on the Internet.

 

[eliminatrix]

WHooops.....I put in proxmox.com = I take it that's a bad idea?

 

[eliminatrix]

Can I change the hostname FQDN thingy after proxmox has been installed?

 

[chotaire]

Yes that is a very bad idea. Do not use real domain names ever, you will just be flooding authoritative nameservers with useless requests or the host will even try to start sending cron emails to that domain and so on and so on. Thanks to someone doing this kind of stuff and provisioning thousands of cloud nodes with this configuration, I ended up with 25,000 new e-mails the other day and the admin was unreachable. You can not imagine how pissed I was.

Yes, the hostname can be changed very easily if the host is not part of a cluster. Please do.
https://pve.proxmox.com/wiki/Renaming_a_PVE_node

 

[chotaire]

E.g. use host1.eliminatrix.local

 

[prolab]

E.g. use host1.eliminatrix.local

Hi, I still have a question. Since the default hostname is pve.lan during the installation. If I want to set up a cluster with some nodes. Should I use pve1.pve.lan, pve2.pve.lan, and pve3.pve.lan or pve1.lan, pve2.lan, and pve3.lan? Why some tutorials use two dots and some use one dot?

 

[ieronymous]

Hi, I still have a question. Since the default hostname is pve.lan during the installation. If I want to set up a cluster with some nodes. Should I use pve1.pve.lan, pve2.pve.lan, and pve3.pve.lan or pve1.lan, pve2.lan, and pve3.lan? Why some tutorials use two dots and some use one dot?

Since your first node doesn't have an identification number, you could (if you font already have created VM's and Containers) change the host name from pve.lan to pve1.lan but this ahs to be done in several paths /etc/hostname /etc/hosts and 2 more that I can't remember right now and from there you can rename your second node as pve2.lan (of course if you dont mind your first node don t have a number let it as it is as well)

Can you load the proxmox GUI except its static IP, with the name also (like https://pve.lan:8006 ??)

 

[prolab]

Since your first node doesn't have an identification number, you could (if you font already have created VM's and Containers) change the host name from pve.lan to pve1.lan but this ahs to be done in several paths /etc/hostname /etc/hosts and 2 more that I can't remember right now and from there you can rename your second node as pve2.lan (of course if you dont mind your first node don t have a number let it as it is as well)

Can you load the proxmox GUI except its static IP, with the name also (like https://pve.lan:8006 ??)

Thank you for the reply. I'm still in the trying process and I have just cleaned the disk and reinstalled it using the hostname as pve5.pve.lan this time.
I can only access it with its IP I can't load the proxmox GUI with the name like https://pve5.pve.lan:8006/ . Why is this? Do I need to setup anything on my router?

 

[ieronymous]

Thank you for the reply. I'm still in the trying process and I have just cleaned the disk and reinstalled it using the hostname as pve5.pve.lan this time.
I can only access it with its IP I can't load the proxmox GUI with the name like https://pve5.pve.lan:8006/ . Why is this? Do I need to setup anything on my router?

In the link chotaireprovided you half the page it mentions <<Ensure that /etc/hosts has an entry with the hostname mapped to the IP you want to use as main IP address for this node.>> So probably there is that and when you type instead of an ip a name the translation from ip to name and vis versa is in the dns level so router. Then again try the above in the /etc/hosts/ but I dont know how exactly it has to be written just with a space between ip and name , does it need a prefix option in order to be accessible with name also. not sure. Have you try issue a certificate to see if it will give you an error? You can do this to avoid the unlock icon to your browser meaning you are entering an insecure web site. Check my post here
https://forum.proxmox.com/threads/hostname-fqdn-huh.63667/
and if you follow the procedure and succeed answer there.

 

[Interceptor]

Yes that is a very bad idea. Do not use real domain names ever, you will just be flooding authoritative nameservers with useless requests or the host will even try to start sending cron emails to that domain and so on and so on.

That is not true.
Most of the time the recommendation is the opposite.

https://serverfault.com/questions/1...domain-suffix-for-private-network/17730#17730
https://community.spiceworks.com/topic/435964-local-vs-ad-domain-com

And don't use .local
That is from pfSense:

Do not use '.local' as the final part of the domain (TLD), The '.local' domain is widely used by mDNS (including Avahi and Apple OS X's Bonjour/Rendezvous/Airprint/Airplay), and some Windows systems and networked devices. These will not network correctly if the router uses '.local'. Alternatives such as '.local.lan' or '.mylocal' are safe.

 

[Stefan Radman]

I'd recommend to use home.arpa
https://datatracker.ietf.org/doc/html/rfc8375

'home.arpa.' is designated for non-unique use in residential home networks.

Stefan

 

[TraderJack012]

Sorry to revive this thread, but it seems appropriate. When trying to connect using Spice console, it says:

Parameter verification failed. (400)

proxy: invalid format - value does not look like a valid address: pve.lan.


Normal (noVNC) console works fine.

Could .lan be added as a valid and qualified domain name? Or is something else happening?

$ pveversion
pve-manager/7.1-10/6ddebafe (running kernel: 5.13.19-4-pve)

 

[vesalius]

I'd recommend to use home.arpa
https://datatracker.ietf.org/doc/html/rfc8375

Stefan

Both pfSense and OPNsense have switched to this as a new install default for home networks, unless I am mistaken.

 

[TraderJack012]

Both pfSense and OPNsense have switched to this as a new install default for home networks, unless I am mistaken.

Sure, and that is good advice. I may switch at one point.

In the meantime, is this a reason that Spice should decide not to allow me to connect?

The normal console works fine.

 

[vesalius]

Haven‘t used spice myself, so I cant help there. Sorry, I responded to older part of this thread without looking at the date of the post.