OpenVswitch with VLAN - Firewall problems

[rsmvdl]

Hello,

i'm currently facing a strange issue. I have a proxmox cluster - v. 4.4-13/7ea56165 (dirty 2 node cluster with 1 quorum vote) and i use OpenVswitch to have networing between my containers/VM and it doenst matter on wich of the 2 nodes the Containers/VM are. They can communicate without any problems trough the physical privat network between the two Proxmox nodes trough the overlayd gre tunnel using tagged-VLAN.

Here are my Network configs so you maybe have a better picture about my problem:

auto lo
iface lo inet loopback

#public
auto eth0
iface eth0 inet manual

#privat
auto eth1
iface eth1 inet dhcp

auto vmbr0
iface vmbr0 inet static
address x.x.x.x
netmask x.x.x.x
gateway x.x.x.x
bridge_ports eth0
bridge_stp off
bridge_fd 0
pre-up ifconfig eth0 mtu 9000

#Global Tenant Network
auto vmbr1
iface vmbr1 inet manual
ovs_type OVSBridge
post-up ovs-vsctl add-port vmbr1 vnet0 -- set interface vnet0 type=gre options:remote_ip=''Privat_IP_of_other_node''


I have no issues at all if i disable the firewall but as soon as i enable the firewall, the Containers/VMs are not able communicate trough the gre tunnel/OpenVswitch. I simply get a "host unreachable" message...
I have opend the privat interfaces (eth1 and vmbr1) on both Proxmox hosts to communicate with each other but with no effect... As soon as thge firewall is set On there simply is no communication anymore...

would be grate if somebody has a hint for me on that case...

Greetings and thanks in advance

 

[Richard]

i'm currently facing a strange issue. I have a proxmox cluster - v. 4.4-13/7ea56165 (dirty 2 node cluster with 1 quorum vote) and i use OpenVswitch to have networing between my containers/VM and it doenst matter on wich of the 2 nodes the Containers/VM are. They can communicate without any problems trough the physical privat network between the two Proxmox nodes trough the overlayd gre tunnel using tagged-VLAN.

Here are my Network configs so you maybe have a better picture about my problem:

auto lo
iface lo inet loopback

#public
auto eth0
iface eth0 inet manual

#privat
auto eth1
iface eth1 inet dhcp

auto vmbr0
iface vmbr0 inet static
address x.x.x.x
netmask x.x.x.x
gateway x.x.x.x
bridge_ports eth0
bridge_stp off
bridge_fd 0
pre-up ifconfig eth0 mtu 9000

#Global Tenant Network
auto vmbr1
iface vmbr1 inet manual
ovs_type OVSBridge
post-up ovs-vsctl add-port vmbr1 vnet0 -- set interface vnet0 type=gre options:remote_ip=''Privat_IP_of_other_node''


I have no issues at all if i disable the firewall but as soon as i enable the firewall, the Containers/VMs are not able communicate trough the gre tunnel/OpenVswitch. I simply get a "host unreachable" message...
I have opend the privat interfaces (eth1 and vmbr1) on both Proxmox hosts to communicate with each other but with no effect... As soon as thge firewall is set On there simply is no communication anymore...

How (and where) are the firewall settings?

If it's the Proxmox VE firewall, run

iptables-save
grep "" /etc/pve/firewall/*

 

[rsmvdl]

yes is use ProxMox VE firewall on these hosts, thats right.

The Firewall settings are enabled on the following levels: Datacenter, Host
as soon as these two levels are enabled im not able to communcate trough the gre tunnel between my two hosts

 

[rsmvdl]

How (and where) are the firewall settings?

If it's the Proxmox VE firewall, run

iptables-save
grep "" /etc/pve/firewall/*

any updates?
please help

 

[2cadz]

Hi,
Sorry for digging up that old thread ...

I have the same issue, have you found a solution?
Regards.