summaryrefslogtreecommitdiff
path: root/PVE/Network/SDN
AgeCommit message (Collapse)Author
2023-05-25separate packaging and source build systemThomas Lamprecht
like almost all of our repos do nowadays, modern git can detect such things on rebase so in development stuff should be hopefully not too much affected by this. Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2023-01-16frr: add prefix-list supportAlexandre Derumier
parsing of prefix-list in frr.conf.local was missing reported on forum: https://forum.proxmox.com/threads/using-the-proxmox-sdn-to-manage-host-connectivity-with-bgp.118553 Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2022-12-30controllers: evpn : correctly limit the number of controllers to max 1Alexandre Derumier
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2022-11-13bridge-disable-mac-learning : use $opts for tap_plugAlexandre Derumier
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2022-08-31evpn controller: avoid declaration in conditional statementThomas Lamprecht
those are quite dangerous, as the variable will keep the value from last time the evaluation was true and still evaluate to that old, out of date value the next time, if the condition is false then. Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2022-08-31evpn controller: style fixesThomas Lamprecht
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2022-08-31frr: config : add exit on router && routemaps.Alexandre Derumier
added recently in last frr releases, just to be sure to no break on future releases Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2022-08-31frr: add a local config parser and merge with generated configAlexandre Derumier
some users with very specific config want to be able to add custom local config and merge it with generated config Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2022-08-31frr: update config frrversion to 8.2.2Alexandre Derumier
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2022-04-27controllers: evpn: fix multiple exit-nodes with route-map filteringAlexandre Derumier
Currently, when multiple exit-nodes are defined, each exit-nodes exchanges their own default route, so traffic is looping between both exit nodes instead going out. This add a new route-map to filter received type-5 on exit node Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2022-03-16zones: add del_bridge_fdbAlexandre Derumier
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2022-03-16zones: add add_bridge_fdbAlexandre Derumier
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2022-03-16zones : tap_plug: add support for disable bridge learningAlexandre Derumier
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2022-03-16vnets: fix get_vnetAlexandre Derumier
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2022-02-24controllers: evpn : use frr restart if reload failAlexandre Derumier
frr reload is not 100% perfect, and sometime is not able to apply correctly changes. Use restart in this case to be sure to have the correct config. Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2022-02-13controllers: evpn : remove ip forwarding, ipv6 forwarding and add frr versionAlexandre Derumier
Forwarding is enabled by default since frr 7.4 also add frr version && reorder some options to avoid warning message on frr reload Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2022-02-13controllers: bgp : remove bgp network import-checkAlexandre Derumier
already enabled since frr 7.4 Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2022-02-13controllers: evpn : remove "no bgp ebgp-requires-policy"Alexandre Derumier
It's already disabled in the default datacenter profile since frr 7.4 Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2022-02-13zones: evpn : add rt-importAlexandre Derumier
Allow to import external route target list from external evpn network (main usecase is DC inter-connect) Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2022-02-13controllers: evpn: add missing bgp router-id in vrfAlexandre Derumier
evpn route distinguisher is compute from bgp router-id. if not defined, it take random ip or 0.0.0.0 and could result collisions between hosts Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2022-02-13controllers: evpn/bgp : add exitnodes-primary && rework route-mapAlexandre Derumier
exitnodes-primary option force traffic to a primary node A route-map is used to increase metric on backup nodes. This can be usefull for snat or avoid asymetric routing. Route-map is rework to handle multiple sequences of route map. Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2022-02-13controllers: evpn : add min/max value to asnAlexandre Derumier
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2022-02-13controllers: bgp: add bgp-multipath-as-path-relax optionAlexandre Derumier
Some users need it to do ecmp when peering with 2 differents asn Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2022-02-13controllers: bgp: use loopback ip src for loopback networkAlexandre Derumier
can be usefull if we want to join other loopback ips, like a ceph cluster in the underlay network Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2022-02-13zones: status : skip node if node don't have the zoneAlexandre Derumier
reported by forum user: https://forum.proxmox.com/threads/proxmox-sdn-incorrect-node-deployment.99834/ Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2022-02-01controllers: allow minus and underscore in IDs againThomas Lamprecht
commit 7c5b0f6 not only reduced the possible length but also the accepted character set, revert the latter partially again and allow using minus and underscore for characters not being the start or end. Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2022-02-01controllers: indentation fixesThomas Lamprecht
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-11-09vnets: alias: fix regexAlexandre Derumier
2021-11-09zones: evpn: add disable-arp-nd-suppression optionAlexandre Derumier
arp-nd-suppression can break ip mobility, when an ip from a vm is moved to another vm, with different mac. For example, with a keepalived vip, the garp is filtered.
2021-11-09vnet/subnet : add skipdns optionAlexandre Derumier
allow to register ip to ipam without dns registration. can be used for temp/pending ip for example
2021-08-24vnet : alias : check patternAlexandre Derumier
fix : https://bugzilla.proxmox.com/show_bug.cgi?id=2966 Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-08-24evpn: add exitnodes-local-routingAlexandre Derumier
This option allow an exit-node to reach itself a guest in evpn network. Forum user have requested it, the exitnode need to reach virtual dns server in evpn. This use a veth-pair instead a simple leak. It's not enable by default is slowing down a little bit the routing. Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-08-24evpn : add advertise-subnets optionAlexandre Derumier
allow to advertise type5 routes for evpn subnets, if vms are silents hosts. (don't do any traffic, so anycast gateway don't have their mac-ip) fix: https://bugzilla.proxmox.com/show_bug.cgi?id=3571 Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-08-24evpn : add "ip route del vrf vrf_myzone unreachable default metric ↵Alexandre Derumier
4278198272" on exit node This is breaking routing between the evpn vrf && default vrf leak on exit node only Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-08-24Revert "evpn : remove "ip route add vrf vrf_myzone unreachable default ↵Thomas Lamprecht
metric 4278198272" on exit node" replaced by another series https://lists.proxmox.com/pipermail/pve-devel/2021-August/049771.html This reverts commit 95e2f20f5c70f0cd0aa4fe80dad35dace9dc165d.
2021-07-21evpn : remove "ip route add vrf vrf_myzone unreachable default metric ↵Alexandre Derumier
4278198272" on exit node This is breaking routing between the evpn vrf && default vrf leak on exit node only Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-06-18subnets/ipam : fix is_gatewayAlexandre Derumier
- add lost is_gateway in subnets subnet when creating subnet - allow reuse ip as gateway in subnet create if it's already flagged gateway in the ipamdb - add tests
2021-06-18vnets: subroutines: return if !$vnetidAlexandre Derumier
2021-06-18add vnets test + ipam fixesAlexandre Derumier
- add vnets tests with multiple subnets - fix pve ipam ipv6 with next_free_ip (ipv6 don't have network && broadcast address) - fix vnet next_free_ip with no ipam
2021-05-10zones: simple|evpn : only enable ip-forward if gateway is defined on the subnetAlexandre Derumier
or ifquery report an error
2021-05-10subnets: fix add|del subnets withtout ipamAlexandre Derumier
2021-05-05qinq: code cleanup and whitespace/indendation fixesThomas Lamprecht
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-05-05zone: qinq: add vnet without tag supportAlexandre Derumier
some user want to be able to define a vnet without vlan, so at qinq zone level, to be able to see traffic from others vnets of this qinq zone. Some example of usage is a inter-vnet firewall/gateway vm. Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-29zones: qinq: classic bridge: fix bridge zone name with multiple zones/vnetsAlexandre Derumier
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-29zones: qinq: ovs: fix duplicate ovs_ports with multiple zones/vnetsAlexandre Derumier
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-28zone status: mark vnets with unknown zone as failedThomas Lamprecht
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-28possible bug fix for falsy named zonesThomas Lamprecht
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-28code/whitespace cleanupThomas Lamprecht
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-28sdn: rename config to running_configThomas Lamprecht
to reduce my confusion.. Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-28zones: IPAM config is optional for a zoneThomas Lamprecht
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>