snat

(delete)

Hello, I've been playing with EVPN SDN on Proxmox VE 8.1.4 and I love it so far, but there are a few things that got me scratching my head. I apologize in advance if this topic has already been discussed, but the forum is just too huge to comb it all. Anway, I got a 2 node cluster and I've...

Hi, I configured 2 Proxmox 8.1.3 servers in one cluster and configure SDN zones as VXLAN. 1. No option turn on DHCP 2. When SNAT checked on subnet, no snat rules /etc/pve/sdn/zones.cfg vxlan: vxlan peers 10.33.3.20,10.33.3.21 ipam pve mtu 1450 nodes pve1,pve...

Hi, since switching to Proxmox VE 8 Postrouting SNAT (Unfortunately I must use NAT) in combination with the Proxmox Firewall is not working anymore even with conntrack zones enabled. In Proxmox VE 7 it worked after adding post-up iptables -t raw -I PREROUTING -i fwbr+ -j CT --zone 1...

Hello everybody, I noticed a bug when using multiple VRFs. When using the same exit-nodes on different vrfs but the primary is different, there is a deny route-map that is added in the MAP_VTEP_IN route-map for type 5 routes. So if vrf "red" has primary exit-node node 1 and vrf "blue" has...

Hello everyone, I configured a zone with multiple vrf with SDN functionality. I defined all nodes in my cluster as exit-nodes. Is it possible to define a primary exit-node per vnet rather than per zone? or to define it on the basis of the subnet? I would actually like to be able to set up SNAT...

Greetings, I have set up a test environment for BGP EVPN SDN as follows: * 3 hypervisor hosts running pve-manager/7.2-7/d0dd0e85. * Each hypervisor has a public IP and is set up as an exit node with SNAT. * Each hypervisor has a private IP that is used to create the BGP EVPN peering. The...

I've set my system up to use NAT. Which works ok, I can give my containers network access and run services on them However I am currently just running one bridge for the network and extending that with new pre and post iptables routes for each port on each container I want to expose. The problem...

Hello, is there any way to configure DNAT, and SNAT to hosts via pve-firewall? Currently we use for outgoing connections: iptables -t nat -A POSTROUTING -s 192.168.64.0/24 -o vmbr0 -j SNAT --to-source 5.7.9.99 iptables -t nat -A POSTROUTING -s 192.168.80.102/32 -o vmbr0 -j SNAT --to-source...

Proxmox 4.4 with CentOS 7 guest in container. Host can reach the internet, but containers cannot. It seems others have had similar problems but I cannot find a solution. Host /etc/network/interfaces auto lo iface lo inet loopback auto eth0 iface eth0 inet static address 192.168.0.2...