I feel marking a vnet as "VM traffic only" would be a nice clear way to present the option, ideally default option too, I can't see many wanting the host to be "on" the vnet.
I just reread your message, and that's bad the firewall isn't applying...
I really think we need either generally allowing disabling link-local on an interface, or simply deny any IP configuration on the SDN bridges.. or a bit nicer, being able mark it for VM traffic only. This bug is not good on default setup btw...
All Ceph daemons register in the CRUSH map wih exactly one IP and one port.
You can have multiple public networks in the config but this is for the case where different hosts of the Ceph cluster are in different IP networks.
It is not practical...
I dont think that note is as wide in scope as the working seem to suggest.
Public and Private (cluster) traffic dont need routability to each other to function, so you're safe on that front. Reading up further, monitors can only have one pinned...
That's worst design possible. Beside the too cheap devices...
Look at one node: when one OSD fails, the other one on the same node has to take over the data from the dead one. It can not be sent to another node because there are already copies...
For once, AI is right :)
Any consumer drive will have low Ceph performance due to rocksDB and sync writes, but those drives in particular are terrible for anything but PC archiving purposes due to it's small SLC cache and very slow QLC nand...
On a Proxmox VE to use eBPF to filter network traffic, it would be totally independent from Proxmox VE configuration interface as this uses iptables or nftables. So all rules would be required to get created somewhere outside. In addition, there...
Discord are best for just chatting away I agree. But I'm not convinced that discord (or any chat tool) is a good format for tech support for all the reasons outlined by others here (not-searchable from outside, difficult to reference...) So I...
I don't like Discord, personally, but find it funny because, if people wanted to chat.. There's an unofficial IRC channel ##proxmox @ Libera Chat (485 people there, something like less than 10 actually chatting..) and I just realized it also...
Because they can chat there, and in forums they have to write complete sentences and read longer posts. ;)
Oh, did I mention that I am absolutely not a fan of Discord, not necessarily because of the above, but because the knowledge shared there...
The official and by far the biggest community is this forum.
All others are small and NOT maintained by the core developers from Proxmox.
Community splitting is almost always a lose lose situation.
We see a lot of really wrong support and...
Please do not use "Proxmox" and our logo for such unofficial services, this is misleading and against our trademark policies.
Please contact office@proxmox.com for details and hints to get this solved.
Never ever use apt upgrade on PVE: always use apt dist-upgrade or it's synonym apt full-upgrade, as detailed in the docs you linked.
That said, if you follow those steps apt will update all packages, not just Ceph one's, which isn't what OP asked...