Creating a Debian VM

[kevindd992002]

If I want a multihomed Debian VM, which of the following network setups would be better:

1) Multiple virtual NIC's connected to separate Linux VLANs in the pve host?
2) Single virtual NIC connected to a VLAN-aware Linux Bridge in the pve host (connected to a trunk port in the physical switch) and then use subinterfaces inside the Debian VM?

I know both will work but I just want to know which is more optimal?

 

[fba]

It all depends. I prefer first option, because I find it is easier for attaching additional vm/ct to same vlans later on. And it is also easier to move a machine from one vlan into another if needed.

 

[kevindd992002]

It all depends. I prefer first option, because I find it is easier for attaching additional vm/ct to same vlans later on. And it is also easier to move a machine from one vlan into another if needed.

Yeah, I thought so too. But performance-wise, they're both the same? This is just for a home network, by the way.

 

[fba]

You mean if network stack in a virtual machine is faster/slower than the network stack on the host?
I have never measured that, my guess is that you won't see any difference in your setup.

 

[kevindd992002]

You mean if network stack in a virtual machine is faster/slower than the network stack on the host?
I have never measured that, my guess is that you won't see any difference in your setup.

Correct. Hmmm, hopefully someone that measured that can chime in. I'm really curious.

 

[UdoB]

1) Multiple virtual NIC's connected to separate Linux VLANs in the pve host?
2) Single virtual NIC connected to a VLAN-aware Linux Bridge in the pve host

I do prefer the first - for another reason: with solution 2 the VM can tamper with all networks from the inside. That's a no-go if you want to have actual control over the traffic between network segments by a separate router/packet filter.