<div dir="ltr">Hi Stefan,<div><br></div><div>We use bonded 10gigabit, our config is below.</div><div><br></div><div>Note eth0 and eth1 are not used.</div><div><br></div><div>We put customer VM's inside the relevant vmbr and tag them with a vlan. </div><div>So say they are on vmbr0 and we set the vlan in PVE to 55 they would have an outer tag of 101 and an inner tag of 55.</div><div><br></div><div>This works very nicely.</div><div><br></div><div><br></div><div><br></div><div><div>auto lo</div><div>iface lo inet loopback</div><div><br></div><div>auto eth0</div><div>iface eth0 inet manual</div><div><br></div><div>auto eth1</div><div>iface eth1 inet manual</div><div><br></div><div>auto eth2</div><div>iface eth2 inet manual</div><div>#post-up for i in rx tx sg tso gso gro; do ethtool -K $IFACE $i off; done</div><div><br></div><div>auto eth3</div><div>iface eth3 inet manual</div><div>#post-up for i in rx tx sg tso gso gro; do ethtool -K $IFACE $i off; done</div><div><br></div><div>auto bond0</div><div>iface bond0 inet manual</div><div> # bonding confuration</div><div> bond_mode 802.3ad</div><div> bond_miimon 100</div><div> bond-lacp-rate 1</div><div> bond-xmit-hash-policy layer3+4</div><div> bond_slaves eth2 eth3</div><div> post-up ifconfig $IFACE mtu 9000</div><div><br></div><div>#Cust01 vlan</div><div>auto bond0.101</div><div>iface bond0.101 inet manual</div><div><br></div><div>#Cust02 vlan</div><div>auto bond0.102</div><div>iface bond0.102 inet manual</div><div><br></div><div>#Cust03 vlan</div><div>auto bond0.103</div><div>iface bond0.103 inet manual</div><div><br></div><div>#Cust04 vlan</div><div>auto bond0.104</div><div>iface bond0.104 inet manual</div><div><br></div><div>#MgmtServers vlan</div><div>auto bond0.200</div><div>iface bond0.200 inet manual</div><div><br></div><div>#Bridge configuration</div><div>auto mgmtbr0</div><div>iface mgmtbr0 inet static</div><div> address 10.99.99.104</div><div> netmask 255.255.255.0</div><div> gateway 10.99.99.254</div><div> post-up ifconfig $IFACE mtu 1500</div><div> bridge_ports bond0.200</div><div> bridge_stp off</div><div> bridge_fd 0</div><div><br></div><div>auto vmbr0</div><div>iface vmbr0 inet manual</div></div><div><div> bridge_ports bond0.101</div><div> bridge_stp off</div><div> bridge_fd 0</div><div><br></div><div>auto vmbr1</div><div>iface vmbr1 inet manual</div><div> bridge_ports bond0.102</div><div> bridge_stp off</div><div> bridge_fd 0</div><div><br></div><div>auto vmbr2</div><div>iface vmbr2 inet manual</div><div> bridge_ports bond0.103</div><div> bridge_stp off</div><div> bridge_fd 0</div><div><br></div><div>auto vmbr3</div><div>iface vmbr3 inet manual</div><div> bridge_ports bond0.104</div><div> bridge_stp off</div><div> bridge_fd 0</div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Sat, Feb 14, 2015 at 9:11 PM, Stefan Priebe <span dir="ltr"><<a href="mailto:s.priebe@profihost.ag" target="_blank">s.priebe@profihost.ag</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<br>
how does your interfaces file looks like?<br>
<br>
Thanks!<br>
<br>
Stefan<span class=""><br>
<br>
Am 11.02.2015 um 22:28 schrieb Andrew Thrift:<br>
</span><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hi Stefan,<span class=""><br>
<br>
I posted a patch to do this a while back:<br>
<br>
<a href="http://pve.proxmox.com/pipermail/pve-devel/2013-April/006995.html" target="_blank">http://pve.proxmox.com/<u></u>pipermail/pve-devel/2013-<u></u>April/006995.html</a><br>
<br>
It will need a few changes to work on pve-test but we have been running<br>
it in production for a few years now.<br>
<br>
<br>
<br>
<br>
On Thu, Feb 12, 2015 at 8:44 AM, Stefan Priebe <<a href="mailto:s.priebe@profihost.ag" target="_blank">s.priebe@profihost.ag</a><br></span><div><div class="h5">
<mailto:<a href="mailto:s.priebe@profihost.ag" target="_blank">s.priebe@profihost.ag</a>><u></u>> wrote:<br>
<br>
<br>
Am 11.02.2015 um 20:25 schrieb Alexandre DERUMIER:<br>
<br>
does anybody know a way to have two bridges on top of<br>
one bond?<br>
<br>
<br>
AFAIK, it's not possible to put a single interfaces on 2 bridge.<br>
<br>
It's possible with tagged interfaces.<br>
<br>
<br>
Yes but the problem is i just would like to have a PVID - so no<br>
untagged traffic on that bridge but there may be other tap devices<br>
with a vid.<br>
<br>
But I think that mixing 1 interface - 1 brige<br>
1 internface.tag - 1 another bridge<br>
<br>
is not working<br>
(maybe a linux bug).<br>
<br>
That may work but won't help me as the "another" bridge may contain<br>
multiple other tags.<br>
<br>
I think it's work with openvswitch.<br>
(I think it work also with an ovs on top of another ovs with<br>
tagged port)<br>
<br>
<br>
That sounds great. Never touched openvswitch? Is there a howto for<br>
proxmox? What's the advantage over normal linux bridges?<br>
<br>
Greets,<br>
Stefan<br>
<br>
<br>
<br>
----- Mail original -----<br>
De: "Stefan Priebe" <<a href="mailto:s.priebe@profihost.ag" target="_blank">s.priebe@profihost.ag</a><br></div></div><span class="">
<mailto:<a href="mailto:s.priebe@profihost.ag" target="_blank">s.priebe@profihost.ag</a>><u></u>><br>
À: "pve-devel" <<a href="mailto:pve-devel@pve.proxmox.com" target="_blank">pve-devel@pve.proxmox.com</a><br></span>
<mailto:<a href="mailto:pve-devel@pve.proxmox.com" target="_blank">pve-devel@pve.proxmox.<u></u>com</a>>><span class=""><br>
Envoyé: Mercredi 11 Février 2015 13:41:58<br>
Objet: [pve-devel] bridge on top of bridge?<br>
<br>
Hi,<br>
<br>
does anybody know a way to have two bridges on top of one bond?<br>
I woulod<br>
like to use the PVID feature for another bridge than the default one<br>
(private LAN without the need to enable tagging on the tap device).<br>
<br>
I already tried to add the 2nd bridge on top of the bond or to<br>
put the<br>
2nd bridge into the first bridge. Both does not work.<br>
<br>
Greets,<br>
Stefan<br></span><span class="">
______________________________<u></u>___________________<br>
pve-devel mailing list<br>
<a href="mailto:pve-devel@pve.proxmox.com" target="_blank">pve-devel@pve.proxmox.com</a> <mailto:<a href="mailto:pve-devel@pve.proxmox.com" target="_blank">pve-devel@pve.proxmox.<u></u>com</a>><br>
<a href="http://pve.proxmox.com/cgi-__bin/mailman/listinfo/pve-devel" target="_blank">http://pve.proxmox.com/cgi-__<u></u>bin/mailman/listinfo/pve-devel</a><br>
<<a href="http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel" target="_blank">http://pve.proxmox.com/cgi-<u></u>bin/mailman/listinfo/pve-devel</a><u></u>><br>
<br>
______________________________<u></u>___________________<br>
pve-devel mailing list<br>
<a href="mailto:pve-devel@pve.proxmox.com" target="_blank">pve-devel@pve.proxmox.com</a> <mailto:<a href="mailto:pve-devel@pve.proxmox.com" target="_blank">pve-devel@pve.proxmox.<u></u>com</a>><br>
<a href="http://pve.proxmox.com/cgi-__bin/mailman/listinfo/pve-devel" target="_blank">http://pve.proxmox.com/cgi-__<u></u>bin/mailman/listinfo/pve-devel</a><br>
<<a href="http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel" target="_blank">http://pve.proxmox.com/cgi-<u></u>bin/mailman/listinfo/pve-devel</a><u></u>><br>
<br>
<br>
</span></blockquote>
</blockquote></div><br></div>