From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by lists.proxmox.com (Postfix) with ESMTPS id 4BF5877FD2 for ; Wed, 21 Jul 2021 17:44:44 +0200 (CEST) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 3751F17CB4 for ; Wed, 21 Jul 2021 17:44:14 +0200 (CEST) Received: from proxmox-new.maurer-it.com (proxmox-new.maurer-it.com [94.136.29.106]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by firstgate.proxmox.com (Proxmox) with ESMTPS id EB31B17CAD for ; Wed, 21 Jul 2021 17:44:09 +0200 (CEST) Received: from proxmox-new.maurer-it.com (localhost.localdomain [127.0.0.1]) by proxmox-new.maurer-it.com (Proxmox) with ESMTP id B55F640D62 for ; Wed, 21 Jul 2021 17:44:09 +0200 (CEST) From: Dylan Whyte To: pve-devel@lists.proxmox.com Date: Wed, 21 Jul 2021 17:43:49 +0200 Message-Id: <20210721154349.1488257-1-d.whyte@proxmox.com> X-Mailer: git-send-email 2.30.2 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-SPAM-LEVEL: Spam detection results: 0 AWL 0.857 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment KAM_SHORT 0.001 Use of a URL Shortener for very short URL SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [default-network-setup-routed.tt] Subject: [pve-devel] [PATCH pve-docs] fix 3523: routed net: make example conform to image X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Jul 2021 15:44:44 -0000 Changes the example given in section "3.3.5. Routed Configuration" so that it's more in line with the accompanying network diagram. Signed-off-by: Dylan Whyte --- images/default-network-setup-routed.svg | 126 +++++++++++++----------- images/default-network-setup-routed.tt | 2 +- pve-network.adoc | 10 +- 3 files changed, 75 insertions(+), 63 deletions(-) diff --git a/images/default-network-setup-routed.svg b/images/default-network-setup-routed.svg index c4ec80c..333e060 100644 --- a/images/default-network-setup-routed.svg +++ b/images/default-network-setup-routed.svg @@ -1,90 +1,102 @@ - - + default_network_setup_routed - -cluster_node1 - -Node: proxmox + + +cluster_node1 + +Node: proxmox -gateway - -Provider Gateway -198.51.100.1 - + +gateway + +Provider Gateway +198.51.100.1 + -node1_eno0 - -eno0 - -198.51.100.5/29 - + +node1_eno0 + +eno0 + +198.51.100.5/29 + -gateway--node1_eno0:eno0 - + +gateway--node1_eno0:eno0 + -node1_vmbr0 - -vmbr0 -203.0.113.17/28 - - -tap100i0 + +node1_vmbr0 + +vmbr0 +203.0.113.17/28 + + +tap100i0 -node1_vmbr0--node1_eno0 - -ip_forward = 1 -proxy_arp = 1 + +node1_vmbr0--node1_eno0 + +ip_forward = 1 +proxy_arp = 1 -vm100 - -ens18 - -VM 100 -203.0.113.18 - + +vm100 + +ens18 + +VM 100 +203.0.113.18 + -node1_vmbr0:tap100i0--vm100:ens18 - + +node1_vmbr0:tap100i0--vm100:ens18 + -vm101 - -ens18 - -VM 101 -203.0.113.19 - + +vm101 + +ens18 + +VM 101 +203.0.113.19 + -node1_vmbr0:tap100i0--vm101:ens18 - + +node1_vmbr0:tap100i0--vm101:ens18 + -vm102 - -ens18 - -VM 101 -203.0.113.20 - + +vm102 + +ens18 + +VM 102 +203.0.113.20 + -node1_vmbr0:tap100i0--vm102:ens18 - + +node1_vmbr0:tap100i0--vm102:ens18 + diff --git a/images/default-network-setup-routed.tt b/images/default-network-setup-routed.tt index b99f54b..eb8ba87 100644 --- a/images/default-network-setup-routed.tt +++ b/images/default-network-setup-routed.tt @@ -31,7 +31,7 @@ graph default_network_setup_routed { [% server(id="vm100" title="VM 100" subtitle="203.0.113.18" top_ports='ens18') %] [% server(id="vm101" title="VM 101" subtitle="203.0.113.19" top_ports='ens18') %] - [% server(id="vm102" title="VM 101" subtitle="203.0.113.20" top_ports='ens18') %] + [% server(id="vm102" title="VM 102" subtitle="203.0.113.20" top_ports='ens18') %] node1_vmbr0:tap100i0 -- vm100:ens18 node1_vmbr0:tap100i0 -- vm101:ens18 diff --git a/pve-network.adoc b/pve-network.adoc index 9178cce..bf24604 100644 --- a/pve-network.adoc +++ b/pve-network.adoc @@ -185,16 +185,16 @@ address. [thumbnail="default-network-setup-routed.svg"] A common scenario is that you have a public IP (assume `198.51.100.5` for this example), and an additional IP block for your VMs -(`203.0.113.16/29`). We recommend the following setup for such +(`203.0.113.16/28`). We recommend the following setup for such situations: ---- auto lo iface lo inet loopback -auto eno1 -iface eno1 inet static - address 198.51.100.5/24 +auto eno0 +iface eno0 inet static + address 198.51.100.5/29 gateway 198.51.100.1 post-up echo 1 > /proc/sys/net/ipv4/ip_forward post-up echo 1 > /proc/sys/net/ipv4/conf/eno1/proxy_arp @@ -202,7 +202,7 @@ iface eno1 inet static auto vmbr0 iface vmbr0 inet static - address 203.0.113.17/29 + address 203.0.113.17/28 bridge-ports none bridge-stp off bridge-fd 0 -- 2.30.2