From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) by lore.proxmox.com (Postfix) with ESMTPS id 567531FF13A for ; Wed, 15 Apr 2026 13:11:44 +0200 (CEST) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 6A9C8EEAB; Wed, 15 Apr 2026 13:11:43 +0200 (CEST) From: Hannes Laimer To: pve-devel@lists.proxmox.com Subject: [PATCH docs/manager/network/proxmox{-ve-rs,-perl-rs} v2 0/7] sdn: add BGP fabric Date: Wed, 15 Apr 2026 13:11:27 +0200 Message-ID: <20260415111134.124720-1-h.laimer@proxmox.com> X-Mailer: git-send-email 2.47.3 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Bm-Milter-Handled: 55990f41-d878-4baa-be0a-ee34c49e34d2 X-Bm-Transport-Timestamp: 1776251419043 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.082 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment RCVD_IN_VALIDITY_CERTIFIED_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_RPBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_SAFE_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [status.rs,frr.rs,bgp.rs,proxmox.com,fabric.rs,fabrics.pm,mod.rs,fabrics.rs,node.rs,main.rs] Message-ID-Hash: 374X3MBTBL7UYAYMVIYFPIWECWJATDOO X-Message-ID-Hash: 374X3MBTBL7UYAYMVIYFPIWECWJATDOO X-MailFrom: h.laimer@proxmox.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.10 Precedence: list List-Id: Proxmox VE development discussion List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: This patch series adds BGP as a third fabric protocol alongside OpenFabric and OSPF. It targets eBGP unnumbered underlays where each node has a unique ASN and peers over physical interfaces without IP assignment on fabric links. ## Dependencies This series depends on the evpn-rework and route-maps series. ## eBGP underlay Each node gets its own ASN (e.g. 65001, 65002, 65003) and peers with its neighbors using 'remote-as external' on unnumbered interfaces. The fabric peer-group is named after the fabric ID and uses BFD when enabled. ## EVPN overlay When the EVPN controller references a BGP fabric, VTEP sessions are iBGP, consistent with how EVPN operates on OSPF and OpenFabric fabrics. The per-node ASN is applied via 'local-as' on the underlay neighbor group. ## Single BGP process Unlike OSPF and OpenFabric which have their own FRR protocol blocks, BGP fabric config must coexist with the EVPN BGP config in one 'router bgp' instance. The fabric generates its own BgpRouter and merges it into the existing one via merge_fabric(), appending neighbor groups and address families without overwriting the EVPN settings. ## IPv6-only support For nodes with only an IPv6 address, the BGP router-id (which must be a 32-bit value) is derived from the IPv6 address using FNV-1a hashing. ### Testing results for hash collisions Scattered /64 n=1000 unique=1000 collisions=0 worst=1 Scattered /64 n=10000 unique=10000 collisions=0 worst=1 Scattered /64 n=100000 unique=99997 collisions=3 worst=2 Sequential /64 n=1000 unique=1000 collisions=0 worst=1 Sequential /64 n=10000 unique=10000 collisions=0 worst=1 Sequential /64 n=100000 unique=100000 collisions=0 worst=1 Spaced /64 (step 256) n=1000 unique=1000 collisions=0 worst=1 Spaced /64 (step 256) n=10000 unique=10000 collisions=0 worst=1 Spaced /64 (step 256) n=100000 unique=100000 collisions=0 worst=1 Sparse multi-/48 n=1000 unique=1000 collisions=0 worst=1 Sparse multi-/48 n=10000 unique=10000 collisions=0 worst=1 Sparse multi-/48 n=100000 unique=100000 collisions=0 worst=1 Only the random assignment in a /64 prefix caused a tiny amount of collisions, and having 100k routers with randomly assigned IPs is not really typical. So FNV-1a does seem like a good choice here. (generally I'm open to alternative approaches for getting router-ids on nodes with no ipv4 ips) Thanks a lot @Stefan for the base of this series! v2, thanks @Gabriel and @Stefan for the (off-list) feedback on v1!: - switched EVPN overlay from eBGP to iBGP - rebased onto Stefan's evpn[1]/route-maps[2] series - made LocalAsSettings fields pub (needed for Rust-side construction) - added router-id collision validation for IPv6-only nodes - added docs section [1] https://lore.proxmox.com/pve-devel/20260414163315.419384-1-s.hanreich@proxmox.com/ [2] https://lore.proxmox.com/pve-devel/20260401143957.386809-1-s.hanreich@proxmox.com/ proxmox-ve-rs: Stefan Hanreich (1): sdn: fabric: add BGP protocol support proxmox-frr/src/ser/bgp.rs | 85 +++++- proxmox-ve-config/src/sdn/fabric/frr.rs | 254 +++++++++++++++- proxmox-ve-config/src/sdn/fabric/mod.rs | 111 +++++++ .../src/sdn/fabric/section_config/fabric.rs | 22 ++ .../src/sdn/fabric/section_config/mod.rs | 19 ++ .../src/sdn/fabric/section_config/node.rs | 21 ++ .../sdn/fabric/section_config/protocol/bgp.rs | 286 ++++++++++++++++++ .../sdn/fabric/section_config/protocol/mod.rs | 1 + .../tests/fabric/cfg/bgp_default/fabrics.cfg | 17 ++ .../fabric/cfg/bgp_ipv6_only/fabrics.cfg | 17 ++ proxmox-ve-config/tests/fabric/main.rs | 119 +++++++- .../snapshots/fabric__bgp_default_pve.snap | 28 ++ .../snapshots/fabric__bgp_default_pve1.snap | 27 ++ .../snapshots/fabric__bgp_ipv6_only_pve.snap | 29 ++ .../snapshots/fabric__bgp_ipv6_only_pve1.snap | 28 ++ .../fabric__bgp_merge_with_evpn_pve.snap | 34 +++ 16 files changed, 1089 insertions(+), 9 deletions(-) create mode 100644 proxmox-ve-config/src/sdn/fabric/section_config/protocol/bgp.rs create mode 100644 proxmox-ve-config/tests/fabric/cfg/bgp_default/fabrics.cfg create mode 100644 proxmox-ve-config/tests/fabric/cfg/bgp_ipv6_only/fabrics.cfg create mode 100644 proxmox-ve-config/tests/fabric/snapshots/fabric__bgp_default_pve.snap create mode 100644 proxmox-ve-config/tests/fabric/snapshots/fabric__bgp_default_pve1.snap create mode 100644 proxmox-ve-config/tests/fabric/snapshots/fabric__bgp_ipv6_only_pve.snap create mode 100644 proxmox-ve-config/tests/fabric/snapshots/fabric__bgp_ipv6_only_pve1.snap create mode 100644 proxmox-ve-config/tests/fabric/snapshots/fabric__bgp_merge_with_evpn_pve.snap proxmox-perl-rs: Hannes Laimer (1): sdn: fabrics: add BGP status endpoints Stefan Hanreich (1): sdn: fabrics: add BGP config generation pve-rs/src/bindings/sdn/fabrics.rs | 114 +++++++++++++++++++++++++++++ pve-rs/src/sdn/status.rs | 105 +++++++++++++++++++++++++- 2 files changed, 217 insertions(+), 2 deletions(-) pve-network: Hannes Laimer (2): sdn: fabrics: register bgp as a fabric protocol type test: evpn: add integration test for EVPN over BGP fabric src/PVE/Network/SDN/Fabrics.pm | 18 +++- .../bgp_fabric/expected_controller_config | 65 ++++++++++++++ .../evpn/bgp_fabric/expected_sdn_interfaces | 56 ++++++++++++ src/test/zones/evpn/bgp_fabric/interfaces | 6 ++ src/test/zones/evpn/bgp_fabric/sdn_config | 85 +++++++++++++++++++ 5 files changed, 229 insertions(+), 1 deletion(-) create mode 100644 src/test/zones/evpn/bgp_fabric/expected_controller_config create mode 100644 src/test/zones/evpn/bgp_fabric/expected_sdn_interfaces create mode 100644 src/test/zones/evpn/bgp_fabric/interfaces create mode 100644 src/test/zones/evpn/bgp_fabric/sdn_config pve-manager: Hannes Laimer (1): ui: sdn: add BGP fabric support www/manager6/Makefile | 3 ++ www/manager6/sdn/FabricsView.js | 12 +++++ www/manager6/sdn/fabrics/NodeEdit.js | 1 + www/manager6/sdn/fabrics/bgp/FabricEdit.js | 53 +++++++++++++++++++ .../sdn/fabrics/bgp/InterfacePanel.js | 13 +++++ www/manager6/sdn/fabrics/bgp/NodeEdit.js | 32 +++++++++++ 6 files changed, 114 insertions(+) create mode 100644 www/manager6/sdn/fabrics/bgp/FabricEdit.js create mode 100644 www/manager6/sdn/fabrics/bgp/InterfacePanel.js create mode 100644 www/manager6/sdn/fabrics/bgp/NodeEdit.js pve-docs: Hannes Laimer (1): sdn: add bgp fabric section pvesdn.adoc | 66 +++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 66 insertions(+) Summary over all repositories: 30 files changed, 1715 insertions(+), 12 deletions(-) -- Generated by murpp 0.11.0