GRE tunnel configuration problem. with 3 servers

[daruom13]

Hello,

I have a Proxmox cluster with 3 servers.
I want to setup a GRE tunnel between the servers, but I have a little problem.

When I configure 2 servers, it works correctly:


However, I don't know how to do it for 3 servers. I tried this:



But it doesn't work.

Thank you in advance.

 

[Richard]

Hello,

I have a Proxmox cluster with 3 servers.
I want to setup a GRE tunnel between the servers, but I have a little problem.

When I configure 2 servers, it works correctly:
View attachment 19708View attachment 19709

However, I don't know how to do it for 3 servers. I tried this:

View attachment 19740View attachment 19741View attachment 19742

But it doesn't work.

Thank you in advance.

It works only with 1 gre port per bridge.

 

[daruom13]

It works only with 1 gre port per bridge.

Hello,

Not sure of that.
I managed to get it to work this way:

server1 :


server2 :


server 3 :

The problem is that the tunnels go through server 1. If it fails, it will break the link between server 2 and server 3.
If I add a tunnel between server 2 and server 3, it no longer works.

 

[spirit]

you need some spanning tree here to avoid loop.

BTW,I'm currently working on a new sdn feature for proxmox, where you can use vxlan tunnel for this

https://forum.proxmox.com/threads/proxmox-6-2-sdn-beta-test.69655/

(and you can add any number of hosts)

It's currenly beta (and it's using linux bridge not ovs), but it should be soon ready.

 

[daruom13]

you need some spanning tree here to avoid loop.

BTW,I'm currently working on a new sdn feature for proxmox, where you can use vxlan tunnel for this

https://forum.proxmox.com/threads/proxmox-6-2-sdn-beta-test.69655/

(and you can add any number of hosts)

It's currenly beta (and it's using linux bridge not ovs), but it should be soon ready.

Hello,

Thank you for your response.
The new feature you are working on sounds very interesting. I will follow this closely.

But, being in the process of learning about proxmox, I want to stick to proven functionality.

I have tried to configure spanning tree, but it does not work. I don't know if I did it right.

Server 1 :


Server 2 :


Server 3 :

 

[spirit]

your config seem to be ok, I really don't known how to debug it with ovs, sorry ....

 

[tuathan]

Hello,

Thank you for your response.
The new feature you are working on sounds very interesting. I will follow this closely.

But, being in the process of learning about proxmox, I want to stick to proven functionality.

I have tried to configure spanning tree, but it does not work. I don't know if I did it right.

Server 1 :
View attachment 19847

Server 2 :
View attachment 19848

Server 3 :
View attachment 19849

Hi did you get anywhere with this? I'm trying to do the same thing in Proxmox with ovswitch to create failsafe communications between VMs on different pve hosts ( https://forum.proxmox.com/threads/openvswitch-bridge-for-cluster-vms-across-private-network.76866/ )

I'm new to this but I've seen in the Proxmox documentation that to enable RSTP using:

up ovs-vsctl set bridge ${IFACE} rstp_enable=true

But here:

https://serverfault.com/questions/8...h-without-loops-and-forwards-with-openvswitch

it was done like this:

up ovs-vsctl set bridge ${IFACE} stp_enable=true

 

[daruom13]

Hi did you get anywhere with this? I'm trying to do the same thing in Proxmox with ovswitch to create failsafe communications between VMs on different pve hosts ( https://forum.proxmox.com/threads/openvswitch-bridge-for-cluster-vms-across-private-network.76866/ )

I'm new to this but I've seen in the Proxmox documentation that to enable RSTP using:

up ovs-vsctl set bridge ${IFACE} rstp_enable=true

But here:

https://serverfault.com/questions/8...h-without-loops-and-forwards-with-openvswitch

it was done like this:

up ovs-vsctl set bridge ${IFACE} stp_enable=true

Hello, no solution on my side for the GRE tunnel still.
I tried rstp and stp, but same result (No more connection for vm which is not on the same host as the firewall)

Cepandnat, the VxLAN solution offered in your son seems relevant to me.
I'll probably test that this weekend.

Cordially.

 

[tuathan]

Hello, no solution on my side for the GRE tunnel still.
I tried rstp and stp, but same result (No more connection for vm which is not on the same host as the firewall)

Cepandnat, the VxLAN solution offered in your son seems relevant to me.
I'll probably test that this weekend.

Cordially.

OK

Yes I decided to go with VxLAN and it seems to work alot better than OVS/GRE with my implementation described here:

https://forum.proxmox.com/threads/o...vms-across-private-network.76866/#post-342238