Guest interface visible on the host level

[Astaoth]

Hi guys,

When creating a VM or a CT, their network interface aren't directly visible on the host level. I mean, some interfaces are created on the host level but don't have the same MAC addresses than the guests and have no IP addresses.

Is there a way to get the guest interfaces on the host level, with their IP adresses ?

 

[gurubert]

Why would you want to have that?

 

[Astaoth]

That's more for the curiosity, in case I need it.

 

[gurubert]

If you want to see the VM's traffic you can already run tcpdump on the tap interface for the VM (or the bridge).

The IP configuration should be available in the GUI when the qemu-guest-agent is running. The MAC address can be read from the config file in /etc/pve/nodes/*/qemu-server/*.conf.

 

[Astaoth]

I'm aware I can get this info from the gui or with Proxmox config files. But a process or a routing table, for example, can't.
My question is more related to have this available on the host level, for having the host system aware of them.

 

[Astaoth]

Bump. Does anyone has an idea on this ?

 

[shanreich]

That would break any form of virtualization, making virtualization useless in the first place.
What exactly would you want to achieve with this? Do you want to monitor traffic?

 

[Astaoth]

For keeping it short, I would like to assign public IP addresses to VM from my AS pool, route the traffic to the correct VM in a dynamic maner (meaning if the VM is migrated to an other node I don't need to rewrite routes, so static hand made routes aren't good), being able to announce this routes to my infra with iBGP, and being able to assign adresses ending with .0 or .255 (I can't simply route traffic for the /24, that would exclude this adresses).

Having VM interfaces directly exposed to the host with their adresses would have permit me to do this with the Bird2 "direct" protocol, but I get that's not something we do with VM. I guess one lead will be to dig into EVPN with a BGP controler ?

 

[shanreich]

I guess one lead will be to dig into EVPN with a BGP controler ?

Yes, that would probably the best solution for your problem.