VM isolation on the same subnet/Vlan. Migration Planning

[admin55]

Hey All, New to the forum and looking at moving to Proxmox from another hypervisor.

Currently have a 3 host cluster with about 80 client windows VM's that we would like to migrate to proxmox.

We are currently using Private vlans in the hypervisor and network switches and have these 70 Vm's spread across an isolated private vlan all on the same subnet and they are all isolated from each other and can only route out the gateway for internet.

10 or so are on community vlans and are on the same subnet but are grouped together. For instance 10.10.10.5-10 can all talk to each other and the gateway but are isolated from the rest of the subnet.

Is there any way in Proxmox I can mirror this setup? I know there isn't PVLAN support but could it be done another way? The goal being able to migrate all VM/workloads and not have to touch the VM's IP Settings or change primary firewall rules.

Any help would be appreciated.

 

[SteveITS]

Proxmox has SDN for cluster-wide VLAN definitions. We use that with a router/firewall VM to isolate and NAT that network.

One can also also set up firewall rules at the VNet or VM level, with shared aliases and IP sets.
https://pve.proxmox.com/pve-docs/chapter-pve-firewall.html#pve_firewall_vnet_configuration

 

[admin55]

Hey Thanks for the reply. So using rules at the VNet level I can isolate Vm's on the same vlan/subnet? I have a email into promox I think I just need to talk to someone and walk through all this.