[PATCH pve-network] sdn: vxlan: fix max value for vxlan-port

[PATCH pve-network] sdn: vxlan: fix max value for vxlan-port

[Hannes Laimer]

As per RFC 768[1] the port is only 16 bits, so the maximum value is
65535. `ifupdown2` failed if 65536 was configured:

```
vxlan_yuuur : error: vxlan_yuuur: vxlan creation failed: 'H' format requires 0 <= number <= 65535
yuuur : error: yuuur: bridge port vxlan_yuuur does not exist
```

[1] https://datatracker.ietf.org/doc/html/rfc768

Signed-off-by: Hannes Laimer <h.laimer@proxmox.com>
---
 src/PVE/API2/Network/SDN/Zones.pm        | 2 +-
 src/PVE/Network/SDN/Zones/VxlanPlugin.pm | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/PVE/API2/Network/SDN/Zones.pm b/src/PVE/API2/Network/SDN/Zones.pm
index b897cbd..e0b417b 100644
--- a/src/PVE/API2/Network/SDN/Zones.pm
+++ b/src/PVE/API2/Network/SDN/Zones.pm
@@ -187,7 +187,7 @@ my $ZONE_PROPERTIES = {
         description =>
             "UDP port that should be used for the VXLAN tunnel (default 4789). VXLAN zone only.",
         minimum => 1,
-        maximum => 65536,
+        maximum => 65535,
         type => 'integer',
         optional => 1,
         default => 4789,
diff --git a/src/PVE/Network/SDN/Zones/VxlanPlugin.pm b/src/PVE/Network/SDN/Zones/VxlanPlugin.pm
index a408261..1d6d588 100644
--- a/src/PVE/Network/SDN/Zones/VxlanPlugin.pm
+++ b/src/PVE/Network/SDN/Zones/VxlanPlugin.pm
@@ -35,7 +35,7 @@ sub properties {
         'vxlan-port' => {
             description => "UDP port that should be used for the VXLAN tunnel (default 4789).",
             minimum => 1,
-            maximum => 65536,
+            maximum => 65535,
             type => 'integer',
             default => 4789,
         },
-- 
2.47.3

Re: [PATCH pve-network] sdn: vxlan: fix max value for vxlan-port

[Christoph Heiss]

On Fri Jul 10, 2026 at 8:06 AM CEST, Hannes Laimer wrote:
> As per RFC 768[1] the port is only 16 bits, so the maximum value is
> 65535. `ifupdown2` failed if 65536 was configured:

Reviewed-by: Christoph Heiss <c.heiss@proxmox.com>
Tested-by: Christoph Heiss <c.heiss@proxmox.com>

FWIW, interestingly, ifupdown2 also specifies 0-65536 as range and thus
accepts it. I'll send a patch fixing it there too.

>
> ```
> vxlan_yuuur : error: vxlan_yuuur: vxlan creation failed: 'H' format requires 0 <= number <= 65535
> yuuur : error: yuuur: bridge port vxlan_yuuur does not exist
> ```
>
> [1] https://datatracker.ietf.org/doc/html/rfc768
>
> Signed-off-by: Hannes Laimer <h.laimer@proxmox.com>
> ---
>  src/PVE/API2/Network/SDN/Zones.pm        | 2 +-
>  src/PVE/Network/SDN/Zones/VxlanPlugin.pm | 2 +-
>  2 files changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/src/PVE/API2/Network/SDN/Zones.pm b/src/PVE/API2/Network/SDN/Zones.pm
> index b897cbd..e0b417b 100644
> --- a/src/PVE/API2/Network/SDN/Zones.pm
> +++ b/src/PVE/API2/Network/SDN/Zones.pm
> @@ -187,7 +187,7 @@ my $ZONE_PROPERTIES = {
>          description =>
>              "UDP port that should be used for the VXLAN tunnel (default 4789). VXLAN zone only.",
>          minimum => 1,
> -        maximum => 65536,
> +        maximum => 65535,
>          type => 'integer',
>          optional => 1,
>          default => 4789,
> diff --git a/src/PVE/Network/SDN/Zones/VxlanPlugin.pm b/src/PVE/Network/SDN/Zones/VxlanPlugin.pm
> index a408261..1d6d588 100644
> --- a/src/PVE/Network/SDN/Zones/VxlanPlugin.pm
> +++ b/src/PVE/Network/SDN/Zones/VxlanPlugin.pm
> @@ -35,7 +35,7 @@ sub properties {
>          'vxlan-port' => {
>              description => "UDP port that should be used for the VXLAN tunnel (default 4789).",
>              minimum => 1,
> -            maximum => 65536,
> +            maximum => 65535,
>              type => 'integer',
>              default => 4789,
>          },