Inter node network

[cparmentier]

Hi,

I have 2 servers: proxmox 1.3
On each server VM: network setup with venet on 10.0.0.0 network.
Each VM (10.0.0.x) can talk to each other and to the internet (and from the internet with NAT).

What I want is to have VMs on node 1 talk to VMs on node 2, so if I move a VM from one node to another one, my virtual network works (also being able to add more nodes in the future).

I guess I do have to setup a tunnel between the 2 nodes on the external (internet) IP adress. How to?
And then how to have the VMs talk to each other using the tunnel like connected to a swicth ?

Do I need to use & setup something with vde_switch ?

Thanks for your help.

Chris

 

[dietmar]

There is no problem if you do NAT on your firewall (I guess you currently do NAT on the proxmox ve host?)

 

[cparmentier]

Yes i do NAT on the both ve hosts.

I just don't know what to do and how to it setup to have all my VMs on both ve hosts talk together.

Thanks

 

[dietmar]

Yes i do NAT on the both ve hosts.

I just don't know what to do and how to it setup to have all my VMs on both ve hosts talk together.

Simply avaiod doing NAT when the destination address is 10.0.0.x

 

[keesje76]

Hi,

I have a question that might be related to this.
Coming from planet VMware, I had there a networking option "host only", so that VMs could not talk to the outside world but still to each other and the host.

Scenario I think of: Have a VM with a VPN/Firewall appliance connected to the internet, making secure VPN access available to a host-only VM with windows, shielding it off.

Is this possible in PVE?

Thanks

 

[dietmar]

Coming from planet VMware, I had there a networking option "host only", so that VMs could not talk to the outside world but still to each other and the host.

you can create a new bridge which is not connected to any physical network card (and use private IPs for the VMs)

 

[keesje76]

Thanks, I looked at this, this is even more powerfull from a GUI point of view than VMware can do, great!

 

[ano]

I have a similar question like the thread starter.
Let's say i got this cluster with master and node server: master (VM101: 10.0.0.1) <=> node (VM102: 94.23.xxx.xxx).
Now i need to connect from VM102 to VM101 and i do not want to assign a public ip to VM101. How to connect the two venet's?

 

[screenie]

simply route these two networks - either locally on your pve-host or on your default gateway(s)....

 

[ano]

i forgot to say master and node server are just connected via the internet, so i guess i need something like vpn.

 

[screenie]

it is not clear to me why you setup a pve-cluster when both pve-hosts are not sharing the same networks - in this setup you cannot migrate vm's from one pve-host to the other one;

are the two pve-hosts directly connected to the internet or is there a firewall/router/l3-switch in between?

depending on your network infrastrukture and hardware you can configure a second network card to bring up both networks on both pve-hosts, use vlan tagging or subinterfaces if they are on the same layer2 network;

if both servers are on different geographic locations you need something like a vpn between these hosts - as you already mentioned before;

 

[ano]

Both servers are directly connected to the internet with a single nic and the servers are on different geographic locations.

 

[screenie]

well, then i would use openvpn in routing mode