Cross Host VLANs?

[MACscr]

Any suggestions for creating vlan's for VM's that will work between KVM guests running on different proxmox hosts, but also without requiring a new vlan setup on our switches each time. Just trying to figure out a way that we can allow end users to create such vlans whenever they want. Obviously the gui cant do it, but I am not even sure how do it from a config standpoint or if its even possible. Many "cloud" providers have obviously found a way to do it though.

 

[offerlam]

This would be a real tricky setup.. and doubt that it can done securely..

first off you need a script, maybe run from a website or something for user interaction that can create the bridged with the vlan on both proxnodes..
i don't see a way you can skip configuring the switches between the proxnodes besides maybe having them connected directly to eachother and that being said it depends what a bridge with a vlan is.. is it tagged... untagged... and so on..

that being said with the before mentioned script you could perhaps also configure your switchs beteween the prox nodes with SNMP for VLAN in the script...

so say you have a webpage where a user fills out the requirement for the vm and all that.. when clicking ok.. the vmbr interface is made with a avalible vlan on all prox nodes and SNMP commands in the script will configure the same VLAN on all switches in between the proxnodes..

but such a script would need root access and admin access to all involved proxnodes and switches which would make it a prime target for hackers... and also you would proberly need to store the passwords and username used in cleartext within the script which, if a hacker got to it, would leave you totally exposed...