VM networking with firewall - the dreaded 10th interface

[dazza76]

Hello All,
I have discovered a unique situation where we are unable to have the firewall active on interfaces above 9.

I thought this would be worth mentioning

Conditions for replication
Host id - 9 digits , Firwall enabled. minimum 10 interfaces

Here is the error.

generating cloud-init ISO
Warning: sch_htb: quantum of class 10001 is big. Consider r2q change.
failed to create interface 'fwbr205100176i10' - the interface name fwbr205100176i10 is too long at /usr/share/perl5/PVE/Network.pm line 183.
kvm: -netdev type=tap,id=net10,ifname=tap205100176i10,script=/usr/libexec/qemu-server/pve-bridge,downscript=/usr/libexec/qemu-server/pve-bridgedown,vhost=on: network script /usr/libexec/qemu-server/pve-bridge failed with status 512
TASK ERROR: start failed: QEMU exited with code 1

Not sure how we can solve this ....
1: shorten the host id
2:dont use 10 interfaces

Cheers
D

 

[fba]

Hi,
you're right, either use shorter vm ids, less than 10 interfaces per vm or switch to the nftables backend, which doesn't use these fwbr-interfaces.
You can also create a bug entry at bugzilla.proxmox.com and hope that this gets fixed in the future.