Intermittent Internet connectivity - Proxmox + OpnSense (Hetzner)

durlabh

New Member
May 22, 2023
2
0
1
I've tried multiple machines and continue to have issues with Proxmox + OpnSense (or Pfsense). From the OpnSense host, internet connectivity seems intermittent. Even on curl for www.google.com, sometimes, it is in instantaneous and sometimes times out.

My host /etc/network/interfaces look like this:

Code:
source /etc/network/interfaces.d/*

auto lo
iface lo inet loopback

iface lo inet6 loopback

auto eno1
iface eno1 inet static
        address 162.55.193.xxx/26
        gateway 162.55.193.xxx
        post-up sysctl -w net.ipv4.ip_forward=1
        post-up iptables -t nat -A PREROUTING -i eno1 -p tcp -m multiport ! --dport 22,8006 -j DNAT --to 192.168.152.1
        post-up iptables -t nat -A PREROUTING -i eno1 -p udp -j DNAT --to 192.168.152.1

iface eno1 inet6 static
        address 2a01:4f7:xxxx:24cf::2/64
        gateway fe80::1

auto eno1.4000
iface eno1.4000 inet static
        address 192.168.141.212/24
        mtu 1400

auto vmbr0
iface vmbr0 inet static
        address 192.168.152.0/24
        bridge-ports none
        bridge-stp off
        bridge-fd 0
        post-up         iptables -t nat -A POSTROUTING -s '192.168.152.0/24' -o eno1 -j MASQUERADE
        post-down       iptables -t nat -D POSTROUTING -s '192.168.152.0/24' -o eno1 -j MASQUERADE

#OPNSense WAN - Proxmox LAN

auto vmbr1
iface vmbr1 inet manual
        ovs_type OVSBridge
#VM Net

In OpnSense, my network is setup as:
Code:
WAN = vmbr0 = 192.168.152.1
LAN = vmbr1

The curl command I'm executed is on OpnSense shell itself.

Any help is highly appreciated
 
I was able to solve it by disabling the Proxmox firewall.

My final config is:

Code:
source /etc/network/interfaces.d/*

auto lo
iface lo inet loopback

iface lo inet6 loopback

iface enp5s0 inet manual

auto enp5s0.4000
iface enp5s0.4000 inet manual
    address 192.168.141.3/24
    mtu 1400
    vlan-raw-edevice enp5s0

#WAN
auto vmbr0
iface vmbr0 inet static
    address 176.9.xx.xx/27
    gateway 176.9.xx.xx
    bridge-ports enp5s0
    bridge-stp off
    bridge-fd 0

#LAN
auto vmbr1
iface vmbr1 inet manual
    bridge-ports none
    bridge-stp off
    bridge-fd 0
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!