From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <daniel@firewall-services.com>
Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68])
 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
 key-exchange X25519 server-signature RSA-PSS (2048 bits))
 (No client certificate requested)
 by lists.proxmox.com (Postfix) with ESMTPS id 0A6F9778F1
 for <pve-user@lists.proxmox.com>; Wed, 28 Apr 2021 14:17:06 +0200 (CEST)
Received: from firstgate.proxmox.com (localhost [127.0.0.1])
 by firstgate.proxmox.com (Proxmox) with ESMTP id E1FD2DFCB
 for <pve-user@lists.proxmox.com>; Wed, 28 Apr 2021 14:16:35 +0200 (CEST)
Received: from pmg.fws.fr (pmg.fws.fr [51.91.175.36])
 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
 key-exchange X25519 server-signature RSA-PSS (2048 bits))
 (No client certificate requested)
 by firstgate.proxmox.com (Proxmox) with ESMTPS id 8D036DFB3
 for <pve-user@lists.proxmox.com>; Wed, 28 Apr 2021 14:16:34 +0200 (CEST)
Received: from pmg.fws.fr (localhost [127.0.0.1])
 by pmg.fws.fr (Proxmox) with ESMTP id 63B72C47BF
 for <pve-user@lists.proxmox.com>; Wed, 28 Apr 2021 14:10:21 +0200 (CEST)
Received: from zmproxy.fws.fr (zmproxy.fws.fr [10.29.1.17])
 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
 (No client certificate requested)
 by pmg.fws.fr (Proxmox) with ESMTPS id 2632AC47BA
 for <pve-user@lists.proxmox.com>; Wed, 28 Apr 2021 14:10:20 +0200 (CEST)
Received: from zmproxy.fws.fr (localhost [127.0.0.1])
 by zmproxy.fws.fr (Postfix) with ESMTPS id 0F0918B4FCA;
 Wed, 28 Apr 2021 14:10:20 +0200 (CEST)
Received: from zmproxy.fws.fr (localhost [127.0.0.1])
 by zmproxy.fws.fr (Postfix) with ESMTPS id E5D388B4FCB;
 Wed, 28 Apr 2021 14:10:19 +0200 (CEST)
DKIM-Filter: OpenDKIM Filter v2.10.3 zmproxy.fws.fr E5D388B4FCB
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=firewall-services.com; s=7DAD15A2-D84A-11E9-8F77-BEC4FAA34EBC;
 t=1619611819; bh=Lwm6mgv+dlXs9Sjeet2/4lHRbxrPolAG65LJbxBGkuE=;
 h=Date:From:To:Message-ID:MIME-Version;
 b=Y7EUvrTTL40JPw1HBXxD56qeUql3ToIva4C2rpqkaeD6R/9x6xR1arLAF+ghlvftf
 s/zwwycqgrjd4H5iByRO7BTa3Er2MGd8MVfJ4cspMFtJ3xfuMh0zpsV1gRQbrw0pma
 O922mXBAvayi7X0kAdONQKo3n4EcHBS8iK1+a8Rb/XGdwlethXLbeOiph01mJ5DcG0
 ZDi0VgCG8IHT15zCULllTqaCMKA1w8TmEvq60cQKiPEf0eJaJXgdYHFn9bCZbC5oRF
 04RaNO/Q5yNXIxlRxFd4L/U7rixjH1Pffw1Ro6wazGUTaJwsnoF8HxTVBd58zxbpzE
 T/z7yQLgMtjtQ==
Received: from zmstore.fws.fr (zmstore.fws.fr [10.29.3.15])
 by zmproxy.fws.fr (Postfix) with ESMTP id DD8798B4FCA
 for <pve-user@lists.proxmox.com>; Wed, 28 Apr 2021 14:10:19 +0200 (CEST)
Date: Wed, 28 Apr 2021 14:10:19 +0200 (CEST)
From: Daniel Berteaud <daniel@firewall-services.com>
To: Proxmox VE user list <pve-user@lists.proxmox.com>
Message-ID: <299675699.4847.1619611819855.JavaMail.zimbra@fws.fr>
MIME-Version: 1.0
X-Originating-IP: [192.168.7.101]
X-Mailer: Zimbra 8.8.15_GA_4018 (ZimbraWebClient - GC89 (Linux)/8.8.15_GA_4026)
Thread-Index: iXeBWa76wCf0dmkyWJYKWdvjhuFpQQ==
Thread-Topic: SDN issues in 6.4
X-SPAM-LEVEL: Spam detection results:  0
 AWL -0.338 Adjusted score from AWL reputation of From: address
 DKIM_SIGNED               0.1 Message has a DKIM or DK signature,
 not necessarily valid
 DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature
 DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's
 domain
 DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from
 domain HTML_MESSAGE            0.001 HTML included in message
 KAM_NUMSUBJECT 0.5 Subject ends in numbers excluding current years
 POISEN_SPAM_PILL          0.1 Meta: its spam
 POISEN_SPAM_PILL_1        0.1 random spam to be learned in bayes
 RCVD_IN_DNSWL_MED        -2.3 Sender listed at https://www.dnswl.org/,
 medium trust
 SPF_HELO_NONE           0.001 SPF: HELO does not publish an SPF Record
 SPF_PASS               -0.001 SPF: sender matches SPF record
 T_REMOTE_IMAGE           0.01 Message contains an external image
 URI_TRUNCATED           0.001 Message contained a URI which was truncated
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Content-Filtered-By: Mailman/MimeDel 2.1.29
Subject: [PVE-User] SDN issues in 6.4
X-BeenThere: pve-user@lists.proxmox.com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Proxmox VE user list <pve-user.lists.proxmox.com>
List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pve-user>, 
 <mailto:pve-user-request@lists.proxmox.com?subject=unsubscribe>
List-Archive: <http://lists.proxmox.com/pipermail/pve-user/>
List-Post: <mailto:pve-user@lists.proxmox.com>
List-Help: <mailto:pve-user-request@lists.proxmox.com?subject=help>
List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-user>, 
 <mailto:pve-user-request@lists.proxmox.com?subject=subscribe>
X-List-Received-Date: Wed, 28 Apr 2021 12:17:06 -0000

Hi.=20

Just upgraded a small 3 nodes cluster to 6.4 today. This cluster used the S=
DN feature with a single VLAN zone, and a few vnets (each one of the vnets =
using a VLAN tag, and not VLAN-aware themself).=20
I see several issues regarding SDN since the upgrade :=20



    * The biggest issue is that in Datacenter -> SDN I only see a single no=
de (with the status "available"). The other two do not appear anymore. With=
out paying attention, I clicked on the "Apply" button. This wiped the /etc/=
network/interfaces.d/sdn file on the 2 nodes which do not appear anymore, a=
nd reloaded their network stack. Needless to say it was a complete failure =
as all the VM attached to one of those vnets lost network connectivity. I'v=
e manually copied this /etc/network/interfaces.d/sdn file from the only wor=
king node to the other two for now, but I can't make any change from the GU=
I now or it'll do the same again=20
    * In Datacenter -> SDN -> Zones, my single zone didn't appear anymore. =
No Zone were displayed at all. But the Vnets correctly showed they were att=
ached to my zone. /etc/pve/sdn/zones.cfg correctly had my zone defined here=
. I tried adding it again from the GUI, which seemed to work. The only chan=
ge it made to /etc/pve/sdn/zones.cfg is the new "ipam: pve" option added to=
 the existing zone=20


Anyone know what could be wrong ? Why would 2 (out of 3) nodes not showing =
up in the SDN status anymore ?=20

The 3 nodes are fully up to date using the no-subscription repo, here's the=
 complete pveversion :=20

pve-manager/6.4-4/337d6701 (running kernel: 5.4.106-1-pve)=20
root@pvo5:~# pveversion -v=20
proxmox-ve: 6.4-1 (running kernel: 5.4.106-1-pve)=20
pve-manager: 6.4-4 (running version: 6.4-4/337d6701)=20
pve-kernel-5.4: 6.4-1=20
pve-kernel-helper: 6.4-1=20
pve-kernel-5.4.106-1-pve: 5.4.106-1=20
pve-kernel-5.4.103-1-pve: 5.4.103-1=20
pve-kernel-5.4.73-1-pve: 5.4.73-1=20
ceph-fuse: 12.2.11+dfsg1-2.1+b1=20
corosync: 3.1.2-pve1=20
criu: 3.11-3=20
glusterfs-client: 5.5-3=20
ifupdown: residual config=20
ifupdown2: 3.0.0-1+pve3=20
ksm-control-daemon: 1.3-1=20
libjs-extjs: 6.0.1-10=20
libknet1: 1.20-pve1=20
libproxmox-acme-perl: 1.0.8=20
libproxmox-backup-qemu0: 1.0.3-1=20
libpve-access-control: 6.4-1=20
libpve-apiclient-perl: 3.1-3=20
libpve-common-perl: 6.4-2=20
libpve-guest-common-perl: 3.1-5=20
libpve-http-server-perl: 3.2-1=20
libpve-network-perl: 0.5-1=20
libpve-storage-perl: 6.4-1=20
libqb0: 1.0.5-1=20
libspice-server1: 0.14.2-4~pve6+1=20
lvm2: 2.03.02-pve4=20
lxc-pve: 4.0.6-2=20
lxcfs: 4.0.6-pve1=20
novnc-pve: 1.1.0-1=20
openvswitch-switch: 2.12.3-1=20
proxmox-backup-client: 1.1.5-1=20
proxmox-mini-journalreader: 1.1-1=20
proxmox-widget-toolkit: 2.5-3=20
pve-cluster: 6.4-1=20
pve-container: 3.3-5=20
pve-docs: 6.4-1=20
pve-edk2-firmware: 2.20200531-1=20
pve-firewall: 4.1-3=20
pve-firmware: 3.2-2=20
pve-ha-manager: 3.1-1=20
pve-i18n: 2.3-1=20
pve-qemu-kvm: 5.2.0-6=20
pve-xtermjs: 4.7.0-3=20
qemu-server: 6.4-1=20
smartmontools: 7.2-pve2=20
spiceterm: 3.1-1=20
vncterm: 1.6-2=20
zfsutils-linux: 2.0.4-pve1=20
root@pvo5:~#=20


--=20


[ https://www.firewall-services.com/ ] =09
Daniel Berteaud=20
FIREWALL-SERVICES SAS, La s=C3=A9curit=C3=A9 des r=C3=A9seaux=20
Soci=C3=A9t=C3=A9 de Services en Logiciels Libres=20
T=C3=A9l : +33.5 56 64 15 32=20
Matrix: @dani:fws.fr=20
[ https://www.firewall-services.com/ | https://www.firewall-services.com ]=
=20