sdn vxlan redundancy link

[Arkadia977]

Hi,

I have 3 clustered proxmox nodes.
Each node has 2 NICs, 1 NIC connected on a public network and 1 NIC on a private network.

I've setup vxlan zone on the private network NICs with Jumbo frame (mtu 9000) and a VTNET in this zone.
That work perfectly, my VMs can communicate between them, no matter the node.

But now, I want add redundancy to my architecture. Corosync is already configured with link 0 on the private NICs and link 1 on the public NICs.
How could I add VXLAN backup links on public interfaces?

I hope I have explained my architecture well.
Thank you in advance for your help !

 

[spirit]

Hi,

I have 3 clustered proxmox nodes.
Each node has 2 NICs, 1 NIC connected on a public network and 1 NIC on a private network.

I've setup vxlan zone on the private network NICs with Jumbo frame (mtu 9000) and a VTNET in this zone.
That work perfectly, my VMs can communicate between them, no matter the node.

But now, I want add redundancy to my architecture. Corosync is already configured with link 0 on the private NICs and link 1 on the public NICs.
How could I add VXLAN backup links on public interfaces?

I hope I have explained my architecture well.
Thank you in advance for your help !

you can add an ip for each host, editing /etc/network/interfaces
and add something like

iface <vnetname>
    address .....

It'll be merged with the sdn generated config.

 

[Arkadia977]

Thanks for your reply.

I'm talking more about adding backup peer link to vxlan.
I have :

auto vxlan_Test
iface vxlan_Tetst
        vxlan-id 10
        vxlan_remoteip 10.0.0.2
        vxlan_remoteip 10.0.0.3
        mtu 8950

I would like to add "vxlan_remoteip" with my public IPs but in backup and not in main link.
Like that if my private network is down, the vxlan nodes can continue to communicate in degraded mode on the public network
Do you think it's possible?

 

[spirit]

Thanks for your reply.

I'm talking more about adding backup peer link to vxlan.
I have :

auto vxlan_Test
iface vxlan_Tetst
        vxlan-id 10
        vxlan_remoteip 10.0.0.2
        vxlan_remoteip 10.0.0.3
        mtu 8950

I would like to add "vxlan_remoteip" with my public IPs but in backup and not in main link.
Like that if my private network is down, the vxlan nodes can continue to communicate in degraded mode on the public network
Do you think it's possible?

mmm, I don't known it's possible out of the box, they are not priority order, or active/backup on vxlan_remoteip.

I think the only way is to do a script, changing the configuration and reloading the networking.


(BTW, mtu 8950 will not work across internet public ip)

 

[Arkadia977]

Yes it is already planned to go back with an MTU of 1450 on the public network.

Maybe EVPN would be more useful for my need?