From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) by lore.proxmox.com (Postfix) with ESMTPS id 637421FF146 for ; Tue, 12 May 2026 16:15:31 +0200 (CEST) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 3606217216; Tue, 12 May 2026 16:15:31 +0200 (CEST) Message-ID: <432044ec-b9e3-4cb0-b556-1476e47e974f@proxmox.com> Date: Tue, 12 May 2026 16:15:21 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: superseded: [PATCH docs/manager/network/proxmox{-ve-rs,-perl-rs} v3 0/8] sdn: add BGP fabric To: pve-devel@lists.proxmox.com References: <20260423140214.187001-1-h.laimer@proxmox.com> From: Hannes Laimer Content-Language: en-US In-Reply-To: <20260423140214.187001-1-h.laimer@proxmox.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Bm-Milter-Handled: 55990f41-d878-4baa-be0a-ee34c49e34d2 X-Bm-Transport-Timestamp: 1778595209600 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.081 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [main.rs,mod.rs,evpnplugin.pm,fabrics.pm,proxmox.com] Message-ID-Hash: RQSKMVE4HGKM7WVB56Q7L2AY7QOQYEWW X-Message-ID-Hash: RQSKMVE4HGKM7WVB56Q7L2AY7QOQYEWW X-MailFrom: h.laimer@proxmox.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.10 Precedence: list List-Id: Proxmox VE development discussion List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: superseded-by: https://lore.proxmox.com/pve-devel/20260512141305.199664-1-h.laimer@proxmox.com/ On 2026-04-23 16:01, Hannes Laimer wrote: > This patch series adds BGP as a third fabric protocol alongside OpenFabric > and OSPF. It targets eBGP unnumbered underlays where each node has a unique > ASN and peers over physical interfaces without IP assignment on fabric links. > > ## Dependencies > > This series depends on the evpn-rework and route-maps series. > > ## eBGP underlay > > Each node gets its own ASN (e.g. 65001, 65002, 65003) and peers with its > neighbors using 'remote-as external' on unnumbered interfaces. The fabric > peer-group is named after the fabric ID and uses BFD when enabled. > > ## EVPN overlay > > When the EVPN controller references a BGP fabric, VTEP sessions are iBGP, > consistent with how EVPN operates on OSPF and OpenFabric fabrics. The > per-node ASN is applied via 'local-as' on the underlay neighbor group. > > ## Single BGP process > > Unlike OSPF and OpenFabric which have their own FRR protocol blocks, BGP > fabric config must coexist with the EVPN BGP config in one 'router bgp' > instance. The fabric generates its own BgpRouter and merges it into the > existing one via merge_fabric(), appending neighbor groups and address > families without overwriting the EVPN settings. > > ## IPv6-only support > > For nodes with only an IPv6 address, the BGP router-id (which must be a > 32-bit value) is derived from the IPv6 address using FNV-1a hashing. > > ### Testing results for hash collisions > Scattered /64 n=1000 unique=1000 collisions=0 worst=1 > Scattered /64 n=10000 unique=10000 collisions=0 worst=1 > Scattered /64 n=100000 unique=99997 collisions=3 worst=2 > Sequential /64 n=1000 unique=1000 collisions=0 worst=1 > Sequential /64 n=10000 unique=10000 collisions=0 worst=1 > Sequential /64 n=100000 unique=100000 collisions=0 worst=1 > Spaced /64 (step 256) n=1000 unique=1000 collisions=0 worst=1 > Spaced /64 (step 256) n=10000 unique=10000 collisions=0 worst=1 > Spaced /64 (step 256) n=100000 unique=100000 collisions=0 worst=1 > Sparse multi-/48 n=1000 unique=1000 collisions=0 worst=1 > Sparse multi-/48 n=10000 unique=10000 collisions=0 worst=1 > Sparse multi-/48 n=100000 unique=100000 collisions=0 worst=1 > > Only the random assignment in a /64 prefix caused a tiny amount of collisions, > and having 100k routers with randomly assigned IPs is not really typical. So > FNV-1a does seem like a good choice here. (generally I'm open to alternative > approaches for getting router-ids on nodes with no ipv4 ips) > > > Thanks a lot @Stefan for the base of this series! > > > v3, thanks @Gabriel and @Stefan for the (mostly off-list) feedback on v2!: > - fixed exit-node routing: moved the set-src route-map from `ip > protocol bgp` to the fabric peer-group's inbound direction, so EVPN > VRF imports aren't dropped by the filter's implicit deny > - renamed the route-map to be per-fabric (pve_bgp_) > - added optional router_id field on BGP nodes (required when the fabric > has no prefix), enabling prefix-less BGP fabrics > - dropped the per-node ASN uniqueness check > - ui: show `router_id` field only when the fabric has no prefix > > > v2, thanks @Gabriel and @Stefan for the (off-list) feedback on v1!: > - switched EVPN overlay from eBGP to iBGP > - rebased onto Stefan's evpn[1]/route-maps[2] series > - made LocalAsSettings fields pub (needed for Rust-side construction) > - added router-id collision validation for IPv6-only nodes > - added docs section > > [1] https://lore.proxmox.com/pve-devel/20260414163315.419384-1-s.hanreich@proxmox.com/ > [2] https://lore.proxmox.com/pve-devel/20260401143957.386809-1-s.hanreich@proxmox.com/ > > > proxmox-ve-rs: > > Stefan Hanreich (1): > sdn: fabric: add BGP protocol support > > proxmox-frr/src/ser/bgp.rs | 85 ++++- > proxmox-ve-config/src/sdn/fabric/frr.rs | 241 +++++++++++++- > proxmox-ve-config/src/sdn/fabric/mod.rs | 160 +++++++++ > .../src/sdn/fabric/section_config/fabric.rs | 22 ++ > .../src/sdn/fabric/section_config/mod.rs | 19 ++ > .../src/sdn/fabric/section_config/node.rs | 21 ++ > .../sdn/fabric/section_config/protocol/bgp.rs | 307 ++++++++++++++++++ > .../sdn/fabric/section_config/protocol/mod.rs | 1 + > .../tests/fabric/cfg/bgp_default/fabrics.cfg | 17 + > .../fabric/cfg/bgp_ipv6_only/fabrics.cfg | 17 + > .../fabric/cfg/bgp_no_prefix/fabrics.cfg | 15 + > .../cfg/bgp_no_router_id_fail/fabrics.cfg | 7 + > proxmox-ve-config/tests/fabric/main.rs | 146 ++++++++- > .../snapshots/fabric__bgp_default_pve.snap | 27 ++ > .../snapshots/fabric__bgp_default_pve1.snap | 26 ++ > .../snapshots/fabric__bgp_ipv6_only_pve.snap | 27 ++ > .../snapshots/fabric__bgp_ipv6_only_pve1.snap | 26 ++ > .../fabric__bgp_merge_with_evpn_pve.snap | 33 ++ > .../snapshots/fabric__bgp_no_prefix_pve.snap | 13 + > 19 files changed, 1201 insertions(+), 9 deletions(-) > create mode 100644 proxmox-ve-config/src/sdn/fabric/section_config/protocol/bgp.rs > create mode 100644 proxmox-ve-config/tests/fabric/cfg/bgp_default/fabrics.cfg > create mode 100644 proxmox-ve-config/tests/fabric/cfg/bgp_ipv6_only/fabrics.cfg > create mode 100644 proxmox-ve-config/tests/fabric/cfg/bgp_no_prefix/fabrics.cfg > create mode 100644 proxmox-ve-config/tests/fabric/cfg/bgp_no_router_id_fail/fabrics.cfg > create mode 100644 proxmox-ve-config/tests/fabric/snapshots/fabric__bgp_default_pve.snap > create mode 100644 proxmox-ve-config/tests/fabric/snapshots/fabric__bgp_default_pve1.snap > create mode 100644 proxmox-ve-config/tests/fabric/snapshots/fabric__bgp_ipv6_only_pve.snap > create mode 100644 proxmox-ve-config/tests/fabric/snapshots/fabric__bgp_ipv6_only_pve1.snap > create mode 100644 proxmox-ve-config/tests/fabric/snapshots/fabric__bgp_merge_with_evpn_pve.snap > create mode 100644 proxmox-ve-config/tests/fabric/snapshots/fabric__bgp_no_prefix_pve.snap > > > proxmox-perl-rs: > > Hannes Laimer (1): > sdn: fabrics: add BGP status endpoints > > Stefan Hanreich (1): > sdn: fabrics: add BGP config generation > > pve-rs/src/bindings/sdn/fabrics.rs | 114 +++++++++++++++++++++++++++++ > pve-rs/src/sdn/status.rs | 105 +++++++++++++++++++++++++- > 2 files changed, 217 insertions(+), 2 deletions(-) > > > pve-network: > > Hannes Laimer (3): > sdn: fabrics: register bgp as a fabric protocol type > test: evpn: add integration test for EVPN over BGP fabric > sdn: evpn: validate fabric has prefix at controller update time > > src/PVE/Network/SDN/Controllers/EvpnPlugin.pm | 9 ++ > src/PVE/Network/SDN/Fabrics.pm | 18 +++- > .../bgp_fabric/expected_controller_config | 64 ++++++++++++++ > .../evpn/bgp_fabric/expected_sdn_interfaces | 56 ++++++++++++ > src/test/zones/evpn/bgp_fabric/interfaces | 6 ++ > src/test/zones/evpn/bgp_fabric/sdn_config | 85 +++++++++++++++++++ > 6 files changed, 237 insertions(+), 1 deletion(-) > create mode 100644 src/test/zones/evpn/bgp_fabric/expected_controller_config > create mode 100644 src/test/zones/evpn/bgp_fabric/expected_sdn_interfaces > create mode 100644 src/test/zones/evpn/bgp_fabric/interfaces > create mode 100644 src/test/zones/evpn/bgp_fabric/sdn_config > > > pve-manager: > > Hannes Laimer (1): > ui: sdn: add BGP fabric support > > www/manager6/Makefile | 3 + > www/manager6/sdn/FabricsView.js | 12 +++ > www/manager6/sdn/fabrics/NodeEdit.js | 1 + > www/manager6/sdn/fabrics/bgp/FabricEdit.js | 53 ++++++++++++++ > .../sdn/fabrics/bgp/InterfacePanel.js | 13 ++++ > www/manager6/sdn/fabrics/bgp/NodeEdit.js | 73 +++++++++++++++++++ > 6 files changed, 155 insertions(+) > create mode 100644 www/manager6/sdn/fabrics/bgp/FabricEdit.js > create mode 100644 www/manager6/sdn/fabrics/bgp/InterfacePanel.js > create mode 100644 www/manager6/sdn/fabrics/bgp/NodeEdit.js > > > pve-docs: > > Hannes Laimer (1): > sdn: add bgp fabric section > > pvesdn.adoc | 81 +++++++++++++++++++++++++++++++++++++++++++++++++++++ > 1 file changed, 81 insertions(+) > > > Summary over all repositories: > 34 files changed, 1891 insertions(+), 12 deletions(-) >