[PVE-User] proxmox cluster from LAN

[Lonnie Cumberland]

Hi All,

Hope that your day is going well.

Although, I do understand about the Corosync latency sensitivity, I have
gone ahead with setting up the VPN for my nodes as an experiment and test
for the POC project.

So now, I can ping all of my nodes from any other node, but have found that
Proxmox is not listening on the new vpn0 device for the 10.8.0.x vpn
network.

In the past, while reading on the Internet somewhere a while ago, and I
have forgotten now where it was, I thought that I came across some
information on how to add some rules to the network that would allow
something like Proxmox to listen on multiple NIC devices.  Actually, the
solution seems to me to be similar to setting each Proxmox node in a
network DMZ, but I think that the real solution should be easier than
installing a firewall for each node.

Does someone have any information on how I can get Proxmox to listen on
multiple NIC's (eth0 and vpn0, for example)?

Any help would be greatly appreciated.
Lonnie

On Tue, Oct 10, 2017 at 10:00 AM, Lonnie Cumberland <lonnie at outstep.com>
wrote:

> Hi Philip,
>
> Thanks for responding to my inquiry.
>
> For the particular project that I am working on, it seems that I will need
> to establish a VPN for the nodes and will have to try and determine the
> best way to go about this since I will need to bring the VPN up so that
> Proxmox can utilize it for communications with the other nodes.  This
> particular project as has base requirement for nodes to be on LAN's and
> WAN's and my objective is to see how well we can make this work while
> contending with the latency issues that may arise.
>
> I plan on trying to set up a simple test case to see how it goes and if
> there are any ways to improve this issue.
>
> Thanks again,
> Lonnie
>
> On Tue, Oct 10, 2017 at 6:46 AM, Philip Abernethy <p.abernethy at proxmox.com
> > wrote:
>
>> For clustering to work you want all nodes to be in the same subnet. VPN
>> can
>> take care of that, but you'll have to configure it yourself.
>> However corosync is very sensitive to latency and doesn't handle RTTs of
>> 3ms
>> or more very well. Therefore you likely don't want to connect your nodes
>> via
>> WAN.
>>
>> Philip
>> On Tue, Oct 10, 2017 at 05:17:50AM -0400, Lonnie Cumberland wrote:
>> > Greetings All,
>> >
>> > I am new to Proxmox 5.0 and am thinking that it might be a perfect fit
>> for
>> > a distributed cluster project that I am working on which involves VM's
>> and
>> > containers.
>> >
>> > I have been researching various Proxmox cluster setups and
>> installations,
>> > but am a bit unclear on some things for which I hope someone in the
>> > community might be able to help me with answering.
>> >
>> > Right now, it seems that you can take 2 Proxmox installations and
>> connect
>> > then into a cluster if they are either on a LAN or on the WAN with
>> public
>> > IP's, but I am wondering if the connections are setup with a VPN between
>> > the master and nodes such that you can connect LAN nodes to a WAN master
>> > with a VPN between them as the LAN nodes may be on a private
>> (192.168.x.x)
>> > network.
>> >
>> > The reason this that I want to be able to scale many nodes into the same
>> > cluster with some on LAN's and some VPS systems on the WAN into a
>> > distributed proxmox cluster.
>> >
>> > I am hoping that you can add nodes on the LAN to the WAN master via a
>> > builtin VPN , but am not sure on this.
>> >
>> > Any insight or information would be greatly appreciated.
>> >
>> > Best, and have a great day
>> > Lonnie
>> > _______________________________________________
>> > pve-user mailing list
>> > pve-user at pve.proxmox.com
>> > https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user
>>
>> _______________________________________________
>> pve-user mailing list
>> pve-user at pve.proxmox.com
>> https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user
>>
>
>