VXLAN-EVPN External connectivity

[rpcomaite]

Hello everyone,

I configured a zone with multiple vrf with SDN functionality. I defined all nodes in my cluster as exit-nodes.
Is it possible to define a primary exit-node per vnet rather than per zone? or to define it on the basis of the subnet?
I would actually like to be able to set up SNAT or DNAT by associating floating Public IPs with a vnet or a subnet.
Floating public IPs would be managed by Keepalived.

Thank you very much everyone for your help.

 

[spirit]

Hello everyone,

I configured a zone with multiple vrf with SDN functionality. I defined all nodes in my cluster as exit-nodes.
Is it possible to define a primary exit-node per vnet rather than per zone? or to define it on the basis of the subnet?

It's really need to be done by zone, (because the default route 0.0.0.0/0 is announced in the whole vrf).
Can't you use multiple zones ?

I would actually like to be able to set up SNAT or DNAT by associating floating Public IPs with a vnet or a subnet.
Floating public IPs would be managed by Keepalived.

Thank you very much everyone for your help.

SNAT currently is pretty simple, it's taking the first ip for going out

            #find outgoing interface
            my ($outip, $outiface) = PVE::Network::SDN::Zones::Plugin::get_local_route_ip($checkrouteip);
            if ($outip && $outiface) {
                #use snat, faster than masquerade
                push @iface_config, "post-up $iptables -t nat -A POSTROUTING -s '$cidr' -o $outiface -j SNAT --to-source $outip";
[CODE]

But it could be possible to add an option specify a static ip , if you have multiple ips.

I would like to support SNAT && DNAT in the future, with a clean interface to manage that.
do you have already tested DNAT ?  (Don't have tried it yet on my side)

 

[rpcomaite]

@spirit I wanted to use several zones but I noticed this bug
https://forum.proxmox.com/threads/sdn-bug-multiple-vrfs.125473/
Besides, do you think it would be possible to be able to define the exit-node based on the presence of a route.
Or maybe it's too personal a configuration that won't be useful to the majority.