X-Git-Url: https://git.proxmox.com/?a=blobdiff_plain;f=vxlan-and-evpn.adoc;h=12bcea90f64e9490e0edd42b76d6457ad3463a9d;hb=c15cb60b8c26634c5580fd1618ee176dd81dc22b;hp=3d495a30dae334dede48730b2afaa561a0e5be06;hpb=3e25ae61729b079c589332b5432ee15724724d72;p=pve-docs.git diff --git a/vxlan-and-evpn.adoc b/vxlan-and-evpn.adoc index 3d495a3..12bcea9 100644 --- a/vxlan-and-evpn.adoc +++ b/vxlan-and-evpn.adoc @@ -20,7 +20,7 @@ VXLAN encapsulation add 50bytes overhead, so you need to increase mtu on your ho physical interfaces to 1550 at minimum. (or decrease mtu inside your vms to 1450) For BUM traffic (broadcast / unknown unicast traffic, multicast), -we have 3 differents vxlan setup modes : multicast, unicast, bgp-evpn +we have 3 different VXLAN setup modes : multicast, unicast, bgp-evpn image::images/vxlan-l2-vlanunaware.svg["vxlan l2 bridge vlan unaware",align="center"] @@ -367,7 +367,6 @@ iface vmbr3 inet manual ---- router bgp 1234 no bgp default ipv4-unicast - no bgp default ipv6-unicast coalesce-time 1000 neighbor 192.168.0.2 remote-as 1234 neighbor 192.168.0.3 remote-as 1234 @@ -437,7 +436,6 @@ iface vmbr3 inet manual ---- router bgp 1234 no bgp default ipv4-unicast - no bgp default ipv6-unicast coalesce-time 1000 neighbor 192.168.0.1 remote-as 1234 neighbor 192.168.0.3 remote-as 1234 @@ -508,7 +506,6 @@ iface vmbr3 inet manual ---- router bgp 1234 no bgp default ipv4-unicast - no bgp default ipv6-unicast coalesce-time 1000 neighbor 192.168.0.1 remote-as 1234 neighbor 192.168.0.2 remote-as 1234 @@ -612,7 +609,6 @@ frr.conf router bgp 1234 bgp router-id 192.168.0.1 no bgp default ipv4-unicast - no bgp default ipv6-unicast coalesce-time 1000 neighbor 192.168.0.2 remote-as 1234 neighbor 192.168.0.3 remote-as 1234 @@ -696,7 +692,6 @@ frr.conf router bgp 1234 bgp router-id 192.168.0.2 no bgp default ipv4-unicast - no bgp default ipv6-unicast coalesce-time 1000 neighbor 192.168.0.1 remote-as 1234 neighbor 192.168.0.3 remote-as 1234 @@ -778,7 +773,6 @@ frr.conf router bgp 1234 bgp router-id 192.168.0.3 no bgp default ipv4-unicast - no bgp default ipv6-unicast coalesce-time 1000 neighbor 192.168.0.1 remote-as 1234 neighbor 192.168.0.2 remote-as 1234 @@ -902,7 +896,6 @@ vrf vrf1 router bgp 1234 bgp router-id 192.168.0.1 no bgp default ipv4-unicast - no bgp default ipv6-unicast coalesce-time 1000 neighbor 192.168.0.2 remote-as 1234 neighbor 192.168.0.3 remote-as 1234 @@ -1011,7 +1004,6 @@ vrf vrf1 router bgp 1234 bgp router-id 192.168.0.2 no bgp default ipv4-unicast - no bgp default ipv6-unicast coalesce-time 1000 neighbor 192.168.0.1 remote-as 1234 neighbor 192.168.0.3 remote-as 1234 @@ -1120,7 +1112,6 @@ vrf vrf1 router bgp 1234 bgp router-id 192.168.0.3 no bgp default ipv4-unicast - no bgp default ipv6-unicast coalesce-time 1000 neighbor 192.168.0.1 remote-as 1234 neighbor 192.168.0.2 remote-as 1234 @@ -1240,7 +1231,6 @@ vrf vrf1 router bgp 1234 bgp router-id 192.168.0.1 no bgp default ipv4-unicast - no bgp default ipv6-unicast coalesce-time 1000 neighbor 192.168.0.2 remote-as 1234 neighbor 192.168.0.3 remote-as 1234 @@ -1372,7 +1362,6 @@ vrf vrf1 router bgp 1234 bgp router-id 192.168.0.2 no bgp default ipv4-unicast - no bgp default ipv6-unicast coalesce-time 1000 neighbor 192.168.0.1 remote-as 1234 neighbor 192.168.0.3 remote-as 1234 @@ -1481,7 +1470,6 @@ vrf vrf1 router bgp 1234 bgp router-id 192.168.0.3 no bgp default ipv4-unicast - no bgp default ipv6-unicast coalesce-time 1000 neighbor 192.168.0.1 remote-as 1234 neighbor 192.168.0.2 remote-as 1234 @@ -1505,6 +1493,16 @@ The external router have ecmp routes to all proxmox nodes.(balancing). If the router send the packet to a wrong node (vm is not on this node), this node will route through vxlan the packet to final destination. +If you have multiple gateway nodes, disable rp_filter as packet could incoming in a 1 node, and outgoing +to another node. + +sysctl.conf tuning +----- +net.ipv4.conf.default.rp_filter=0 +net.ipv4.conf.all.rp_filter=0 +----- + + *node1 ---- @@ -1600,7 +1598,6 @@ vrf vrf1 router bgp 1234 bgp router-id 192.168.0.1 no bgp default ipv4-unicast - no bgp default ipv6-unicast coalesce-time 1000 neighbor 192.168.0.2 remote-as 1234 neighbor 192.168.0.3 remote-as 1234 @@ -1735,7 +1732,6 @@ vrf vrf1 router bgp 1234 bgp router-id 192.168.0.2 no bgp default ipv4-unicast - no bgp default ipv6-unicast coalesce-time 1000 neighbor 192.168.0.1 remote-as 1234 neighbor 192.168.0.3 remote-as 1234 @@ -1868,7 +1864,6 @@ vrf vrf1 router bgp 1234 bgp router-id 192.168.0.3 no bgp default ipv4-unicast - no bgp default ipv6-unicast coalesce-time 1000 neighbor 192.168.0.1 remote-as 1234 neighbor 192.168.0.2 remote-as 1234 @@ -1970,7 +1965,6 @@ vrf vrf1 router bgp 1234 bgp router-id 192.168.0.1 no bgp default ipv4-unicast - no bgp default ipv6-unicast coalesce-time 1000 neighbor 192.168.0.2 remote-as 1234 neighbor 192.168.0.3 remote-as 1234 @@ -2056,7 +2050,6 @@ router bgp 1234 bgp cluster-id 1.1.1.1 #cluster-id must be the same on each route reflector bgp log-neighbor-changes no bgp default ipv4-unicast - no bgp default ipv6-unicast neighbor fabric peer-group neighbor fabric remote-as 1234 neighbor fabric capability extended-nexthop @@ -2080,7 +2073,6 @@ router bgp 1234 bgp cluster-id 1.1.1.1 bgp log-neighbor-changes no bgp default ipv4-unicast - no bgp default ipv6-unicast neighbor fabric peer-group neighbor fabric remote-as 1234 neighbor fabric capability extended-nexthop @@ -2102,7 +2094,6 @@ proxmoxnode(s) router bgp 1234 bgp router-id 192.168.0.x no bgp default ipv4-unicast - no bgp default ipv6-unicast coalesce-time 1000 neighbor 192.168.0.200 remote-as 1234 neighbor 192.168.0.201 remote-as 1234