Routed Mode with multiple IP blocs

[c0mm0n]

Hi,

Just installed a new Proxmox 6 box and checking network configuration.
https://pve.proxmox.com/wiki/Network_Configuration

Context:
- 1 public IP
- Several IP blocs

Right now I have everything working in bridge mode, but i'm under the issue mentionned in the article where I have to register mac @ at provider level.

So i'm digging the Routed mode and wanted to check how to implement it in the multi bloc context.

- So i'd start with the exact same config as in the wiki (replacing with my current IPs)
- Add one vmbr per IP bloc and use the first bloc IP for the VMBR (losing one IP there)
- Add IPs to containers and use the corresponding vmbr based on their IP bloc

Would look like this

auto lo
iface lo inet loopback

auto eno1
iface eno1 inet static
        address  198.51.100.5
        netmask  255.255.255.0
        gateway  198.51.100.1
        post-up echo 1 > /proc/sys/net/ipv4/ip_forward
        post-up echo 1 > /proc/sys/net/ipv4/conf/eno1/proxy_arp


auto vmbr0
iface vmbr0 inet static
        address  203.0.113.17
        netmask  255.255.255.248
        bridge_ports none
        bridge_stp off
        bridge_fd 0
        
auto vmbr1
iface vmbr1 inet static
        address  10.0.1.17
        netmask  255.255.255.248
        bridge_ports none
        bridge_stp off
        bridge_fd 0       
        
etc...

Do I get it?

Thx

 

[Stoiko Ivanov]

Do I get it?

Does it work?

if not - there's a few things to consider (mostly dependent on your ISP/Datacenterprovider):
* are the public-ip blocks routed to your "main public IP" (i.e. is 203.0.113.17/29 routed to 198.51.100.5) - this is something your provider needs to tell you
* if yes then your config seems good
* otherwise are they directly attached and do they have a gateway in that network - then it might be better to not configure any ip from the secondary
network ip block on the host, but directly inside the container and use the provided gateway in the container

for the private range 10.0.1.17/29 you most likely would need to setup NAT

In any case this is something you need to solve with your ISP - since we cannot tell you how their network looks like

I hope this helps!