Hetzner vswitch and Proxmox

[backtothebeck]

Hey,

I have a cloud server, a vSwitch & a dedicated server at Hetzner.

These are connected as follows:

I can ping 10.0.0.2 from the Proxmox host. From the guest machines too.

The guest machines should use the PfSense (cloud server) as a gateway to the Internet and for routing.

I can ping them. But don't use it as a gateway.

Anyone have any idea what I need to put there?
I haven't been able to get there for 2 weeks.

Thanks!

 

[bobmc]

How many public IP's do you have?

 

[backtothebeck]

How many public IP's do you have?

Cloud Server: 1
Dedicated: 2

But why? All Traffic should go through the pfsense or isnt it possible?

 

[bobmc]

Sorry, I didn't pick up on the fact that pfsense is running outside of Proxmox.

So your VM's have an ip setup like

address 10.0.1.5
subnet 255.255.254.0
gateway 10.0.0.2

Is that correct?

 

[backtothebeck]

Sorry, I didn't pick up on the fact that pfsense is running outside of Proxmox.

So your VM's have an ip setup like

address 10.0.1.5
subnet 255.255.254.0
gateway 10.0.0.2

Is that correct?

no the Proxmox has an own subnet via vswitch and should be routed by Hetzner.
10.0.1.5
255.255.255.0
10.0.1.1

 

[bobmc]

But your VM's can reach the internet? What does a 'traceroute' on one of the VM's tell you about the network route?

 

[backtothebeck]

But your VM's can reach the internet? What does a 'traceroute' on one of the VM's tell you about the network route?

only * * ** * * * I can't ping the vSwitch Gateway (10.0.1.1) but I can ping an Host in other network. Its weird

 

[bobmc]

traceroute from proxmox host to 10.0.0.2 ?

result of ip route on proxmox host?

 

[backtothebeck]

traceroute from proxmox host to 10.0.0.2 ?

traceroute to 10.0.0.2 (10.0.0.2), 30 hops max, 60 byte packets
1 static.XX-XX-XX-XX.clients.your-server.de (XX.XX.XX.XX) 0.290 ms 0.326 ms 0.368 ms
2 core11.nbg1.hetzner.com (213.239.203.221) 0.467 ms core12.nbg1.hetzner.com (213.239.203.225) 0.287 ms core11.nbg1.hetzner.com (213.239.203.221) 0.496 ms
3 * * *
4 * * *
5 * * *
6 * * *
7 * * *
8 * * *
9 * * *
10 * * *
11 * * *
12 * * *
13 * * *
14 * * *
15 * * *
16 * * *
17 * * *
18 * * *
19 * * *
20 * * *
21 * * *
22 * * *
23 * * *

XX.XX.XX.XX is my Public IP

 

[bobmc]

I meant from your proxmox host (10.0.1.2) to 10.0.0.2

only * * ** * * * I can't ping the vSwitch Gateway (10.0.1.1) but I can ping an Host in other network

what does this mean? please be more specific and provide some examples of what works and what doesn't - remember we don't know how you have set things up...

You have said you can reach the proxmox host, on Hertzner hosting, so we assume that networking on the left side of your diagram is working, but now the traceroute results you provided suggests it isn't??? And if you can't reach your host, how did you create any VM's ??

 

[backtothebeck]

I meant from your proxmox host (10.0.1.2) to 10.0.0.2

what does this mean? please be more specific and provide some examples of what works and what doesn't - remember we don't know how you have set things up...

You have said you can reach the proxmox host, on Hertzner hosting, so we assume that networking on the left side of your diagram is working, but now the traceroute results you provided suggests it isn't??? And if you can't reach your host, how did you create any VM's ??

via the external ip

 

[maatsche]

Did you end up coming up with a solution ?

Thx