All traffice is visible on bridge vmbr0

rotem

New Member
Jan 11, 2024
2
0
1
I have a Proxmox Cluster (8.1.3) with OVS.

the problem is every VM can see all other traffice on the vlan. No matter the source and destination.

this is critical issue for us because every VM that need internet access get the vmbr0 with tag 10 - and all traffice is visible.
Promics is OFF on the TAP interface - didnt help.
Code:
auto eth2
iface eth2 inet manual


auto eth3
iface eth3 inet manual


auto eth4
iface eth4 inet manual


auto eth6
iface eth6 inet manual


auto eth7
iface eth7 inet manual


auto bond0
iface bond0 inet manual
        ovs_bridge vmbr0
        ovs_type OVSBond
        ovs_bonds eth2 eth3 eth4 eth6 eth7
        bond-miimon 100
        ovs_options lacp=active other_config:lacp-time=fast bond_mode=balance-tcp


auto vmbr0
iface vmbr0 inet manual
        ovs_type OVSBridge
        ovs_ports bond0 wan_us-ny2 int_sc int_vmkernel int_vmotion

need your help on this.

thank you.
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!