OpenVPN multi-site cluster

blastmun

New Member
Dec 27, 2023
23
1
3
Hello, I would like to manage a remote proxmox node via my main interface, so I created an OpenVPN server on my main network node 10.8.0.0 and I added my second local node + my remote node. To do this I modified the /etc/hosts file of the respective nodes by entering the different IPs of the nodes in the VPN network (I followed this tutorial). Concerning the cluster it mounts correctly, in my new network 10.8.0.0. On the other hand, I don't know why I don't have access to its different nodes if I connect to the main node. Obviously in the web admin, it does not use the @IP configured in the cluster in 10.8.0.0X but the old local IP 192.168.1.X.

My second concern is that when the VPN service goes up on the client nodes, a route is automatically added:
192.168.1.0/24 via 10.8.0.1 dev tun0

Although I added a route to my nodes in the /etc/network/interfaces file
up route add -net 192.168.1.0/24 gw 192.168.1.1 dev vmbr0
But when the VPN goes up it automatically sets its route
 
Such setup is completely unsupported unless you somehow manage to keep latencies under ~8ms max [1]. Unless this is some kind of POC or experiment, I advise against using such cluster configuration.

[1] https://pve.proxmox.com/wiki/Cluster_Manager#_cluster_network
I know that this is not recommended, after all I do not have ZFS replicated storage on my remote node. I added it in the cluster because I just want to have access to it through the same admin page. Is there another way to proceed?
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!