Installguide proxmox on Software Raid (Hetzner EQ6 server)

Hi,

I configured only one vmbr0 and the additional routes, no OpenVZ is configured.
You may want to also test this scenario.

Additionally I added three vmbr's for private LAN usage. The firewall is connected with pub if (vmbr0) and private if (vmbr198), VMs are connected with if only to vmbr198.

if = interface

i.e.:
# device: eth0
auto eth0
iface eth0 inet static
address xx.xx.78.143
netmask 255.255.255.255
broadcast xx.xx.78.159
gateway xx.xx.78.129
pointopoint xx.xx.78.129
post-up iptables-restore < /etc/iptables.up.rules

auto vmbr0
iface vmbr0 inet static
address xx.xx.78.143
netmask 255.255.255.255
broadcast xx.xx.78.159
bridge_ports none
bridge_stp off
bridge_fd 0

up ip route add xx.xx.75.198/32 dev vmbr0
up ip route add xx.xx.75.199/32 dev vmbr0
up ip route add xx.xx.75.200/32 dev vmbr0

auto vmbr198
iface vmbr198 inet static
address 192.168.198.1
netmask 255.255.255.0
bridge_ports none
bridge_stp off
bridge_fd 0

auto vmbr199
iface vmbr199 inet static
address 192.168.199.1
netmask 255.255.255.0
bridge_ports none
bridge_stp off
bridge_fd 0

auto vmbr200
iface vmbr200 inet static
address 192.168.200.1
netmask 255.255.255.0
bridge_ports none
bridge_stp off
bridge_fd 0
 
I'm sorry. If I use KVM and just enough this configuration?

# device: eth0
auto eth0
iface eth0 inet static
address 178.63.15.199 "example"
broadcast 178.63.15.191
netmask 255.255.255.192
gateway 178.63.15.129
pointtopoint 178.63.15.129
up echo 1 > /proc/sys/net/ipv4/ip_forward

### NETWORK KVM
auto vmbr0
iface vmbr0 inet static
address 178.63.15.199 "example"
broadcast 178.63.15.191
netmask 255.255.255.255
bridge_ports none
bridge_stp off
bridge_fd 0
up ip route add 178.63.15.177/32 dev vmbr0 "example"
up ip route add 178.63.15.178/32 dev vmbr0 "example"
up ip route add 178.63.15.179/32 dev vmbr0 "example"

I have to make other changes or is this configuration enough?? thanks
 
Hi Ablius,

yes that should be enough of configuration to get it started from my experiences with the network config.
I don't completely understand the concept of how Hetzner is filtering network traffic from the physical and virtual interfaces, but I think its filtered because of the MAC-Adresses (only physical is allowed). So don't ask me about that in detail. ;)

Good luck, bye. :)
 
Last edited by a moderator:
With KVM can create the virtual machine. network configuration fails automatically, is done manually. Na unfortunately the guest machine can not access the internet. can only ping the node on the IP but can not pin google.it
 
Have you set one of your Public IP-Adresses/Netmask/gateway to the interface of your virtual machine?
 
Thanks for your help. This is the configuration:

server Root

# device: eth0
auto eth0
iface eth0 inet static
address 178.63.15.199 "example"
broadcast 178.63.15.191
netmask 255.255.255.192
gateway 178.63.15.129
pointtopoint 178.63.15.129
up echo 1 > /proc/sys/net/ipv4/ip_forward

### NETWORK KVM
auto vmbr0
iface vmbr0 inet static
address 178.63.15.199 "example"
broadcast 178.63.15.191
netmask 255.255.255.255
bridge_ports none
bridge_stp off
bridge_fd 0
up ip route add 178.63.15.177/32 dev vmbr0 "example"
up ip route add 178.63.15.178/32 dev vmbr0 "example"
up ip route add 178.63.15.179/32 dev vmbr0 "example"

Server Guest

auto eth0
iface eth0 inet static
address 178.63.15.177
broadcast 178.63.15.191
netmask 255.255.255.192
gateway 178.63.15.129

I tried to change the net mask but I can not access the same

auto eth0
iface eth0 inet static
address 178.63.15.177
broadcast 178.63.15.191
netmask 255.255.255.255
gateway 178.63.15.129

Thanks for your help
 
Good morning,

On my guest machine:
Code:
public_interface: <BROADCAST,UP,10000> mtu 1500 qdisc pfifo_fast qlen 30
inet xx.xx.75.198/28 brd xx.xx.75.207 scope global public_interface

As you can see, my netmask is /28 (.240)

You seem to have a netmask of /26 (.192)

Is .192 the netmask hetzner told you to use? I can't remember which it was initially in my case. :)

Bye.
 
Good morning. In fact I use it / 26. I need to set this parameter to the root servers?
# Device: eth0
auto eth0
iface eth0 inet static
address 178.63.15.199 "example"
broadcast 178.63.15.191
netmask 255.255.255.192
Gateway 178.63.15.129
pointtopoint 178.63.15.129
up echo 1> / proc/sys/net/ipv4/ip_forward

# # # NETWORK KVM
Car vmbr0
vmbr0 iface inet static
address 178.63.15.199 "example"
broadcast 178.63.15.191
netmask 255.255.255.255
bridge_ports ninth
bridge_stp off
bridge_fd 0
up ip route add 178.63.15.177/26 dev vmbr0 "example"
up ip route add 178.63.15.178/26 dev vmbr0 "example"
up ip route add 178.63.15.179/26 dev vmbr0 "example"

Server - Guest

auto eth0
iface eth0 inet static
address 178.63.15.177
broadcast 178.63.15.191
netmask 255.255.255.192
Gateway 178.63.15.129

so set the vm guest access should "hope."
do a test if anything is blocking the server network!
 
Hi,

the routing entries on the host should by in every case /32, not /26 as you set them above.

But the config in the guest should be whatever hetzner told you to use for you additional public IPs, in my case it was /28, in your case it could be completely different.

good luck.
 
ok I've set the root network / 32. Give me an example of your guest machines please. thanks
 
Hi,

I'm not running a debian-based Guest machine, the syntax probably differs from yours:


Code:
eth0_DHCP_HOSTNAME=<hostname>
eth0_ADDRESS=xx.xx.75.198
eth0_NETMASK=255.255.255.240
eth0_TYPE=STATIC
eth0_NETADDRESS=xx.xx.75.192
eth0_BROADCAST=xx.xx.75.207
DNS1=208.67.222.222 (opendns)
DNS2=208.67.220.220 (opendns)
DEFAULT_GATEWAY=xx.xx.75.193
 
Thanks to Ellen for such a great guide, it helped me set up Proxmox just fine using a KVM container and Windows guest using NAT.

However, I would like to get the networking part working, so that I could install and run a VM on a public IP. I cannot get it done, even after days of trying to figure it out.

Problem is that everyone is posting it's own version of the config, with it's own IP addresses - which makes it very difficult to figure out :)

Could someone please be so kind to repost a configuration with a clear distinction in IP addresses? Especially since we know we only get 4 IP address as a standard from Hetzner? Maybe like:
[IP1]
[IP2]
[IP3]
[IP4]

Thanks in advance!
 
Oh, and maybe even better - would someone who got it working be interested in configuring it (and documenting) on my server? Willing to pay for the assistance. I'm eager to get this working.
 
After various tests have not been able to advance much. basic know that:

1 - the bridge is not allowed
2 - we have to use routed bridge (brouter) as detailed http://wiki.hetzner.de/index.php/Netzkonfiguration_f%C3%BCr_Xen_und_KVM_mit_libvirt
3 - all must be netmask to 255.255.255.255
4 - also must be ip main 255,255,255,255 example:

# Device: eth0
auto eth0
iface eth0 inet static
address 178.63.15.199 "example"
broadcast 178.63.15.191
netmask 255.255.255.255
Gateway 178.63.15.129
pointtopoint 178.63.15.129
post-up echo 1 > /proc/sys/net/ipv4/conf/eth0/proxy_arp
post-up echo 1 > /proc/sys/net/ipv4/ip_forward

### ROUTER-BRIDGE KVM
auto vmbr0
vmbr0 iface inet static
address 178.63.15.199 "example"
broadcast 178.63.15.191
netmask 255.255.255.255
pointopoint 178.63.15.129
bridge_ports none
bridge_stp off
bridge_fd 0
up ip route add 178.63.15.177/26 dev vmbr0 "example"
up ip route add 178.63.15.178/26 dev vmbr0 "example"
up ip route add 178.63.15.179/26 dev vmbr0 "example"

Server - Guest

auto eth0
iface eth0 inet static
address 178.63.15.177
broadcast 178.63.15.191
netmask 255.255.255.255
Gateway 178.63.15.199
pointopoint 178.63.15.199


with this configuration can be bred ping ip main external router will any more. Someone able to understand why. Not that it takes a iptables configuration for the router-bridge??
 
The following /etc/network/interfaces worked for me:

auto lo
iface lo inet loopback

auto eth0
iface eth0 inet static
address server-ip
netmask 255.255.255.224
gateway server-gw

auto vmbr0
iface vmbr0 inet static
address subnet-first-ip
netmask 255.255.255.248
gateway server-ip
bridge_ports lo
bridge_stp off
bridge_fd 0
I have the 100% the same sysctl.conf as described in the first post bot no routes were necessary. Now, using subnet-first-ip[/ip] as gateway in the guest works just fine.
 
OK SOLVED ALL WORKS

This is the root of the network configuration:

SERVER ROOT

### Hetzner Online AG - installimage
# Loopback device:
auto lo
iface lo inet loopback

# device: eth0
auto eth0
iface eth0 inet static
address 178.63.15.199
broadcast 178.63.15.191
netmask 255.255.255.192
gateway 178.63.15.129
pointopoint 178.63.15.129
post-up echo 1 > /proc/sys/net/ipv6/conf/eth0/proxy_ndp
post-up echo 1 > /proc/sys/net/ipv4/conf/eth0/proxy_arp
post-up echo 1 > /proc/sys/net/ipv4/ip_forward

auto vmbr0
iface vmbr0 inet static
address 178.63.15.199
netmask 255.255.255.255
broadcast 178.63.15.191
bridge_stp off
bridge_fd 0
bridge_ports none
up ip route add 178.63.15.177/32 dev vmbr0
up ip route add 178.63.15.178/32 dev vmbr0
up ip route add 178.63.15.179/32 dev vmbr0


SERVER GUEST

iface eth0 inet static
address 178.63.15.177
broadcast 178.63.15.191
netmask 255.255.255.255
gateway 178.63.15.199
pointopoint 178.63.15.199

Be careful when you install the guest network configuration will not work now. must remove the MACAddress.
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!