cluster with gre tunnel ok, but ipsec no

[ale.ab]

Hello,
i have two proxmox server in two datacenter and i would create a cluster for simply backup and administration...

I succesfully create a cluster with gre tunnel with this procedure...

for example
server1: 11.11.11.11 public ip
server2: 22.22.22.22 public ip

on server1

# modprobe ip_gre
# ip tunnel add gre1 mode gre remote 22.22.22.22 local 11.11.11.11 ttl 255
# ip link set gre1 up
# ip addr add 10.10.10.1/24 dev gre1

on server2

# modprobe ip_gre
# ip tunnel add gre1 mode gre remote 11.11.11.11 local 22.22.22.22 ttl 255
# ip link set gre1 up
# ip addr add 10.10.10.2/24 dev gre1

i can ping 10.10.10.1 and .2 correctly, so i create a cluster correctly.
But GRE tunnel are nor envrypted, and i would create a GRE + IPSEC tunnel but i don't understand how...

can someone help me?

Thank you in advance

 

[Richard]

i have two proxmox server in two datacenter and i would create a cluster for simply backup and administration...

I succesfully create a cluster with gre tunnel with this procedure...

for example
server1: 11.11.11.11 public ip
server2: 22.22.22.22 public ip


i can ping 10.10.10.1 and .2 correctly, so i create a cluster correctly.
But GRE tunnel are nor envrypted, and i would create a GRE + IPSEC tunnel but i don't understand how...

That sounds quite tricky, is very interesting but not really a useful configuration: the idea of clustering is to have to nodes which are very close to each other and are connected by an exclusively for this purpose used network.

However, if you really like to have such a solution I recommend openvpn for establishing a reliable, encrypted point-to-point tunnel.

 

[ale.ab]

Ok, me too prefer openvpn but i don't understand how to configure...
Tun? Tap?
i try to configure in tun mode but not function...
i have a debian openvpn server and works correctly...

but proxmox has an interface VMBR and debian eth0...

in debian openvpn before i created certificates, then i have this config file

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
user nobody
group users
persist-key
persist-tun
status openvpn-status.log
verb 3
client-to-client

configuring iptables and client....

in debian works, but in proxmox no...

thank you