VXLAN-EVPN External connectivity

rpcomaite

New Member
Mar 24, 2023
23
0
1
Hello everyone,

I configured a zone with multiple vrf with SDN functionality. I defined all nodes in my cluster as exit-nodes.
Is it possible to define a primary exit-node per vnet rather than per zone? or to define it on the basis of the subnet?
I would actually like to be able to set up SNAT or DNAT by associating floating Public IPs with a vnet or a subnet.
Floating public IPs would be managed by Keepalived.

Thank you very much everyone for your help.
 
Last edited:
Hello everyone,

I configured a zone with multiple vrf with SDN functionality. I defined all nodes in my cluster as exit-nodes.
Is it possible to define a primary exit-node per vnet rather than per zone? or to define it on the basis of the subnet?
It's really need to be done by zone, (because the default route 0.0.0.0/0 is announced in the whole vrf).
Can't you use multiple zones ?

I would actually like to be able to set up SNAT or DNAT by associating floating Public IPs with a vnet or a subnet.
Floating public IPs would be managed by Keepalived.

Thank you very much everyone for your help.

SNAT currently is pretty simple, it's taking the first ip for going out

Code:
            #find outgoing interface
            my ($outip, $outiface) = PVE::Network::SDN::Zones::Plugin::get_local_route_ip($checkrouteip);
            if ($outip && $outiface) {
                #use snat, faster than masquerade
                push @iface_config, "post-up $iptables -t nat -A POSTROUTING -s '$cidr' -o $outiface -j SNAT --to-source $outip";
[CODE]

But it could be possible to add an option specify a static ip , if you have multiple ips.

I would like to support SNAT && DNAT in the future, with a clean interface to manage that.
do you have already tested DNAT ?  (Don't have tried it yet on my side)