Hi everybody,
I am totally lost with a problem that bugs me since a couple of days, but despite reading numerous posts/sites, I wasn't able to solve it (Sorry in advance if this was answered here somewhere and I just didn't get it)
We have a small two-node Proxmox cluster runinng Proxmox 6.2 with Hetzner. The servers are bound to a Hetzner vswitch with a public subnet. The containers are assigned IPs from this public subnet. This works pretty well. However, now I need to route a Hetzner failover IP which is currently pointing to an older - soon to be discarded - server that is serving a couple of webites (80,443) to a container in the proxmox cluster.
The failover IP must be accessible in addition to the normal IP of the container. Hetzner failover IPs do not have MAC addresses and can only be routed to the main IPs of dedicated servers, not to an arbitrary IP like a container IP. Plus the traffic of the failover IP must be routed through the interface with the main IP. Unfortunately, despite all my tries I couldn't get this to work. Traffic to the Failover IP ends on the HOST server and doesn't get routed to the container.
At the moment I am trying to route the IP to the container, alternatively it would be sufficient to forward only port 80 and 443 to the container.
This is my current (non- working) try. Does anyone perhaps a similiar setup and give some hint? I am totally out of ideas now:
Host configuration:
Container configuration:
Any help is highly appreciated! Thanks
I am totally lost with a problem that bugs me since a couple of days, but despite reading numerous posts/sites, I wasn't able to solve it (Sorry in advance if this was answered here somewhere and I just didn't get it)
We have a small two-node Proxmox cluster runinng Proxmox 6.2 with Hetzner. The servers are bound to a Hetzner vswitch with a public subnet. The containers are assigned IPs from this public subnet. This works pretty well. However, now I need to route a Hetzner failover IP which is currently pointing to an older - soon to be discarded - server that is serving a couple of webites (80,443) to a container in the proxmox cluster.
The failover IP must be accessible in addition to the normal IP of the container. Hetzner failover IPs do not have MAC addresses and can only be routed to the main IPs of dedicated servers, not to an arbitrary IP like a container IP. Plus the traffic of the failover IP must be routed through the interface with the main IP. Unfortunately, despite all my tries I couldn't get this to work. Traffic to the Failover IP ends on the HOST server and doesn't get routed to the container.
At the moment I am trying to route the IP to the container, alternatively it would be sufficient to forward only port 80 and 443 to the container.
This is my current (non- working) try. Does anyone perhaps a similiar setup and give some hint? I am totally out of ideas now:
Host configuration:
Code:
auto lo
iface lo inet loopback
iface enp35s0 inet manual
iface enp35s0.4044 inet manual
mtu 1400
auto enp39s0
iface enp39s0 inet static
address <LOCAL CLUSTER IP>
auto vmbr0
iface vmbr0 inet static
address <SERVER MAIN IP>/32
gateway <SERVER MAIN GATEWAY>
bridge-ports enp35s0
bridge-stp off
bridge-fd 0
pointopoint <SERVER MAIN GATEWAY>
iface vmbr0 inet6 static
address <SERVER MAIN IP>
gateway fe80::1
auto vmbr1
iface vmbr1 inet manual
bridge-ports enp35s0.4044
bridge-stp off
bridge-fd 0
mtu 1400
auto vmbr2
iface vmbr2 inet static
address <FAILOVER IP>
netmask 255.255.255.255
bridge_ports none
bridge_stp off
bridge_fd 0
up ip route add <FAILOVER IP>/32 dev vmbr0Container configuration:
Code:
auto lo
iface lo inet loopback
auto eth0
iface eth0 inet static
address <VSWITCH SUBNET IP>/28
gateway <VSWITCH SUBNET GATEWAY>
mtu 1400
iface eth0 inet6 static
address <VSWITCH SUBNET IP>
gateway <VSWITCH SUBNET GATEWAY>
mtu 1400
auto eth1
iface eth1 inet static
address <FAILOVER IP>/32
# --- BEGIN PVE ---
post-up ip route add <SERVER MAIN IP> dev eth1
post-up ip route add default via <SERVER MAIN IP> dev eth1
pre-down ip route del default via <SERVER MAIN IP> dev eth1
pre-down ip route del <SERVER MAIN IP> dev eth1
# --- END PVE ---
pointopoint <SERVER MAIN IP>Any help is highly appreciated! Thanks
Last edited:
