PVE-Firewall blocking OVS-bridge

Master64

Member
Apr 26, 2019
9
0
21
32
Hi,
So I am trying to set up a simple OVS bringe with a single NIC.
1641162518068.png
Config:
Code:
auto lo
iface lo inet loopback

allow-vmbr0 ens3
iface ens3 inet manual
        ovs_type OVSPort
        ovs_bridge vmbr0
        ovs_mtu 1450

allow-ovs vmbr0
iface vmbr0 inet static
        address 158.37.63.230/24
        gateway 158.37.63.1
        ovs_type OVSBridge
        ovs_ports ens3
        ovs_mtu 1450

source /etc/network/interfaces.d/*


But for some reason the proxmox firewall is blocking the OVSPort. I can only get OVS to work but only by disabling the firewall.
Any workarounds? Find it very strange that the PVE firewall kicks inn, and it clearly looks like a serious bug. Cant find any info in the pvefw-logger

Similar issue discussed: https://github.com/0xvext/proxmox-seconiontap.sh/issues/1

Based on the thread, I believe the issue is that the firewall is trying to be created on a Linux Bridge, but since only the OVSbriges/OVSport are available, something goes wrong
 
Last edited:

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!