Is cross node virtual networking possible?

[SOCLab]

Hi,

We are endeavoring to create a lab environment with three separate networks in order to simulate a security operations center. The idea is to have one network be for cyber attackers, one network be for a simulated company, and one network to be a security service provider for that company.

We currently have a cluster of 9 proxmox VE nodes and anticipate that at least one of the networks described above will require the resources of more than one node. That being the case, is it possible to create these networks in a way that when we instantiate new virtual machines we can attach them to whichever network we want regardless of which node the VM resides on? If so, how should we implement? (VyOS seems like it might be suited to this?)

Here's a visual of what we're trying to achieve:



Thanks!

 

[ph0x]

Yes, of course, you can do this via VLANs that you define on the participating hosts and on the switch(es) that connect those hosts.

 

[SOCLab]

Yes, of course, you can do this via VLANs that you define on the participating hosts and on the switch(es) that connect those hosts.

Thanks for the quick reply! Networking n00b here so sorry if these are obvious questions. Concerned about the need for physical NIC's on the host machines. We only have 2 NIC's per host. As an example, if we wanted implement the below architecture would machine 5 need 3 NIC's?

 

[ph0x]

If you can define 802.1q VLANs, then no. If your switch is only capable of static/internal VLANs, then probably yes.
Working in a cyber range environment you should definitely strife for someone who knows VLANs in and out, if I may add.

 

[SOCLab]

Thanks for the great info, that really helps! Now to dive into learning VLANs haha.