[pve-devel] [PATCH] Virtual vlan tagging to bridge interface

Johannes Ernst info at filemedia.de
Fri Jan 10 20:35:40 CET 2014


The problem isn’t the tagging, tagging on the tap interface should work. Tagging directly on the tunnel interface won’t work. So you cannot do tunnel.1000. 
The problem is here that the virtual device will not be pass the interface checks. For example this check won’t work: PVE::Tools::dir_glob_foreach($dir, '((eth|bond)\d+)', sub {

I will do some ovs tests next week if is possible to do bind a tunnel interface to it.

Am 10.01.2014 um 19:59 schrieb Alexandre DERUMIER <aderumier at odiso.com>:

>>> If alexandre’s patch don’t work with any devices it isn’t really interesting because it addressing other functionality and devices. I checked the patch and it use the same problematic part with eth*, wifi* and >>bond* check which fails with virtual devices like gre, ipsec,..
> 
> What do you mean by "don't work with any devices" ?
> 
> My patch is to manage vlan tags on the bridge, not eth interface.
> 
> eth0---->vmbr0<------tap interface
> 
> vlan are tagged on tap interfaces plugged on vmbr0, with new "bridge" cmd. (like an access port on a cisco switch)
> and vlans are allowed to pass through eth0.(like a trunk port on cisco switch)
> 
> So I think it should work with gre,ipsec,...(But I don't have tested it yet)
> 
> 
> 
> 
> 
> ----- Mail original -----
> 
> De: "Johannes Ernst" <info at filemedia.de>
> À: pve-devel at pve.proxmox.com
> Envoyé: Vendredi 10 Janvier 2014 18:16:30
> Objet: Re: [pve-devel] [PATCH] Virtual vlan tagging to bridge interface
> 
> Thus, it’s a configuration issue and NOT a kernel issue.
> 
> If alexandre’s patch don’t work with any devices it isn’t really interesting because it addressing other functionality and devices. I checked the patch and it use the same problematic part with eth*, wifi* and bond* check which fails with virtual devices like gre, ipsec,..
> 
> Am 10.01.2014 um 17:18 schrieb Dietmar Maurer <dietmar at proxmox.com>:
> 
>>> Sure? Do you have additional information? I think it's not correct and it works!
>> 
>> We tested that a few times (and failed), so nobody is keen to test that again.
>> 
>> We currently try to use the new bridge VLAN features - that looks more promising (see patches from Alexandre).
>> 
> 
> 
> _______________________________________________
> pve-devel mailing list
> pve-devel at pve.proxmox.com
> http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 496 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.proxmox.com/pipermail/pve-devel/attachments/20140110/d0bf2fd3/attachment.sig>


More information about the pve-devel mailing list