[PATCH pve-network v5 5/9] sdn: evpn: derive IP version from CIDR for gateway-less subnets

[Hannes Laimer <h.laimer@proxmox.com>]

The IP version was derived from the gateway alone, falling back to
IPv4 when no gateway was set. So on exit nodes an IPv6 subnet with
SNAT but no gateway got its NAT rules for iptables, which rejects the
IPv6 source. Fall back to the subnet CIDR.

Signed-off-by: Hannes Laimer <h.laimer@proxmox.com>
---

Notes:
    v3:
     - derive the IP version from the CIDR for gateway-less subnets

 src/PVE/Network/SDN/Zones/EvpnPlugin.pm | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/src/PVE/Network/SDN/Zones/EvpnPlugin.pm b/src/PVE/Network/SDN/Zones/EvpnPlugin.pm
index 0e79707c3746..c1d5536e09c0 100644
--- a/src/PVE/Network/SDN/Zones/EvpnPlugin.pm
+++ b/src/PVE/Network/SDN/Zones/EvpnPlugin.pm
@@ -253,7 +253,12 @@ sub generate_sdn_config {
 
         my $iptables = undef;
         my $checkrouteip = undef;
-        my $ipversion = Net::IP::ip_is_ipv6($gateway) ? 6 : 4;
+        my $ipversion = 4;
+        if ($gateway) {
+            $ipversion = Net::IP::ip_is_ipv6($gateway) ? 6 : 4;
+        } elsif ($subnet->{network}) {
+            $ipversion = Net::IP::ip_is_ipv6($subnet->{network}) ? 6 : 4;
+        }
 
         if ($ipversion == 6) {
             $ipv6 = 1;
-- 
2.47.3