OVS bridge setup question

[gkovacs]

Let's say I have three nodes in a cluster. All 3 have a NIC that is connected to a LAN (vmbr0), and also have a NIC for external (vmbr1), but only one of the nodes actually has a connection to the internet. VM's that connect to the LAN only can be freely migrated since they will find the same LAN on vmbr0 on any node. VM's that need direct external connection however work only on the node that has the internet plugged in.

I'm interested in setting up OVS that would present a virtual bridge on all cluster nodes that would give external network connection to a VM the same way if it was on the internet-connected node. Any idea how that could be done? I would appreciate a detailed answer or a link to some tutorial, as I have no prior experience with OVS.

Another question: will my simple, unmanaged LAN switch be able to support this scenario, or do I need to upgrade to a VLAN-aware switch to forward OVS traffic?

 

[udo]

Let's say I have three nodes in a cluster. All 3 have a NIC that is connected to a LAN (vmbr0), and also have a NIC for external (vmbr1), but only one of the nodes actually has a connection to the internet. VM's that connect to the LAN only can be freely migrated since they will find the same LAN on vmbr0 on any node. VM's that need direct external connection however work only on the node that has the internet plugged in.

I'm interested in setting up OVS that would present a virtual bridge on all cluster nodes that would give external network connection to a VM the same way if it was on the internet-connected node. Any idea how that could be done? I would appreciate a detailed answer or a link to some tutorial, as I have no prior experience with OVS.

Another question: will my simple, unmanaged LAN switch be able to support this scenario, or do I need to upgrade to a VLAN-aware switch to forward OVS traffic?

Hi,
you need vlan-tagging for this (execept you use the same network for different networks, which is highly not recommend because every VM hear your internet-traffic (tcpdump)).

Udo

 

[gkovacs]

Hi,
you need vlan-tagging for this (execept you use the same network for different networks, which is highly not recommend because every VM hear your internet-traffic (tcpdump)).

Udo

What about GRE tunneling? According to this tutorial:

OVS can use GRE tunnels between hosts as a way of encapsulating traffic and creating an overlay network.

http://blog.scottlowe.org/2013/05/07/using-gre-tunnels-with-open-vswitch/

Anyone have experience with this?