Search results

  1. T

    Disabling conntrack on VM interface (with nftables-based firewall enabled)

    Hey everyone, I've got a VM running a site to site VPN which is a backup to a physical connection handled by a hardware router. As a result of this, the traffic passing via the internal interface may be asymmetrical, or existing connections created over the physical backhaul connection may at...
  2. T

    nftables-based firewall seems to ignore `firewall` parameter on VM network interfaces

    I've been testing out the newer nftables-based firewall, and outside of the (very annoying) syntax changes for iplists/aliases, it seems to be working well. However, I noticed an issue when configuring a VM that has three network interfaces. Only two of the three interfaces have the firewall...
  3. T

    Ability to Disable TLS transport

    Hi all, I'm in a situation where I'm being heavily bottlenecked by my PBS's TLS speed. I'm running PBS as a VM on a Synology RS1221RP+, and when I run a benchmark against the repository, the TLS speed is the clear bottleneck. Additionally, the CPU usage of the PBS vm gets pinned to 100% during...
  4. T

    CEPH with mixed-rate (10g/25g) nodes - bad idea?

    Howdy, So we've got a relatively small CEPH NVMe cluster consisting of 4x nodes, each with a Samsung datacenter 3.8TB M.2 SSD inside. Each node has 4x 10g connections, 2x in LACP for normal traffic, 2x in LACP for CEPH traffic. Connected using a pair of S4048-ON switches. We're looking at...
  5. T

    VLAN interface - attach to vmbr0 or bond0?

    Hello, So I've got a few servers where they are connected to our ethernet switch via an LACP bond. It's basically like: vmbr0 (vlan aware) -> bond0 -> eno1, eno2 We need to add a vlan interface in order to access our storage network VLAN on the bond. My question is, do I attach the vlan...
  6. T

    [SOLVED] Can't access Proxmox Web UI until after ping from PVE -> Client

    I'm having a weird issue and I've been unable to find a solution online, but I have a feeling someone here might know the solution. I've got a PVE 7.1-7 box running right now, and I have its management interface assigned as `vlan10` (The main VLAN on my network). We'll call the hypervisor...
  7. T

    Backup jobs over NFS - Out of options?

    Hey guys, I'm in a bit of a pickle. I'll start by going over my setup: - Storage server running TrueNas with 10Gb networking - ZFS pools - One pool with 12x 2TB drives in raidz2 (storage B) - Another pool with 3x 400GB ssds in stripe (storage A) - Single hypervisor - Boot disk is 400GB NVMe...