Alright, please forgive my ignorance on some items here.
What I'm trying to do is setup a hosting environment for one of my small clients. The end goal is to connect the SDN vNET directly to an IPSec tunnel to the client, much how Azure and AWS works.
Currently, I have the SDN and eVPN controllers all setup with BGP to the firewall which is a pfSense+ Netgate 8200. The BGP routing works fine, and I can probably figure out the VTI tunnel to connect to the routes. BUT, the vNET uses the Proxmox node as it's next hop, which allows traffic on that lan to be accessible to the VMs and vice-versa.
How can we setup to segregate all VM traffic and basically shunt it through the firewall?
What I'm trying to do is setup a hosting environment for one of my small clients. The end goal is to connect the SDN vNET directly to an IPSec tunnel to the client, much how Azure and AWS works.
Currently, I have the SDN and eVPN controllers all setup with BGP to the firewall which is a pfSense+ Netgate 8200. The BGP routing works fine, and I can probably figure out the VTI tunnel to connect to the routes. BUT, the vNET uses the Proxmox node as it's next hop, which allows traffic on that lan to be accessible to the VMs and vice-versa.
How can we setup to segregate all VM traffic and basically shunt it through the firewall?