[SOLVED] Single VLAN bridge x multiple bridges

[gelcom]

Hi all, sorry for the NOOB question as this is my first attempt to run a Proxmox server.

I have a trunk port comming from my switch that will serve several VLANs to proxcmox VMs.

As far as I understand from my online readings I can setup this in 2 different ways:

a) create a VLAN aware bridge with all VLANs in this bridge and set VLAN id when configuring the VM. This way I'll have just one bridge and all VMs will be connected to it.
b) create a specific bridge with VLAN tag in for each VM. This way I'll have several bridges with VLAN tag. Each bridge is associated to only one VM. By doing this I don't have to worry with VLANs on VM config.

What's the difference between this 2 options from a security point of view? Both are correct? Which one should I use?

kind regards
GWR

 

[spirit]

from a security point of view, this is the same. with non-vlanware bridge the vlan tag is done when going out the physical interfaces, but with differents bridge, traffic is correctly isolated.

vlan-aware bridge reduce number of bridge, and you can also see vlan inside the guest, if you don't force vlan in vm nic options.

 

[gelcom]

Thanks!