]>
Commit | Line | Data |
---|---|---|
f5eabba0 | 1 | package PVE::Network::SDN::Zones::EvpnPlugin; |
63586d2f AD |
2 | |
3 | use strict; | |
4 | use warnings; | |
f5eabba0 | 5 | use PVE::Network::SDN::Zones::VxlanPlugin; |
63586d2f AD |
6 | use PVE::Tools qw($IPV4RE); |
7 | use PVE::INotify; | |
4405f2de | 8 | use PVE::Network::SDN::Controllers::EvpnPlugin; |
63586d2f | 9 | |
f5eabba0 | 10 | use base('PVE::Network::SDN::Zones::VxlanPlugin'); |
63586d2f AD |
11 | |
12 | sub type { | |
13 | return 'evpn'; | |
14 | } | |
15 | ||
63586d2f AD |
16 | sub properties { |
17 | return { | |
63586d2f AD |
18 | 'vrf-vxlan' => { |
19 | type => 'integer', | |
20 | description => "l3vni.", | |
21 | }, | |
22 | 'controller' => { | |
23 | type => 'string', | |
24 | description => "Frr router name", | |
25 | }, | |
26 | }; | |
27 | } | |
28 | ||
29 | sub options { | |
30 | ||
31 | return { | |
c2b9c173 | 32 | nodes => { optional => 1}, |
63586d2f AD |
33 | 'vrf-vxlan' => { optional => 0 }, |
34 | 'controller' => { optional => 0 }, | |
823f2e2a | 35 | mtu => { optional => 1 }, |
63586d2f AD |
36 | }; |
37 | } | |
38 | ||
39 | # Plugin implementation | |
40 | sub generate_sdn_config { | |
ba7ac021 | 41 | my ($class, $plugin_config, $zoneid, $vnetid, $vnet, $controller, $interfaces_config, $config) = @_; |
63586d2f AD |
42 | |
43 | my $tag = $vnet->{tag}; | |
44 | my $alias = $vnet->{alias}; | |
45 | my $ipv4 = $vnet->{ipv4}; | |
46 | my $ipv6 = $vnet->{ipv6}; | |
47 | my $mac = $vnet->{mac}; | |
48 | ||
1de0abc0 | 49 | my $vrf_iface = "vrf_$zoneid"; |
63586d2f AD |
50 | my $vrfvxlan = $plugin_config->{'vrf-vxlan'}; |
51 | ||
52 | die "missing vxlan tag" if !$tag; | |
912fb443 | 53 | warn "vlan-aware vnet can't be enabled with evpn plugin" if $vnet->{vlanaware}; |
63586d2f | 54 | |
5a60da84 | 55 | my @peers = PVE::Tools::split_list($controller->{'peers'}); |
1f543c5f | 56 | my ($ifaceip, $iface) = PVE::Network::SDN::Zones::Plugin::find_local_ip_interface_peers(\@peers); |
63586d2f AD |
57 | |
58 | my $mtu = 1450; | |
ba7ac021 | 59 | $mtu = $interfaces_config->{$iface}->{mtu} - 50 if $interfaces_config->{$iface}->{mtu}; |
0251ed2f | 60 | $mtu = $plugin_config->{mtu} if $plugin_config->{mtu}; |
63586d2f AD |
61 | |
62 | #vxlan interface | |
1de0abc0 | 63 | my $vxlan_iface = "vxlan_$vnetid"; |
63586d2f AD |
64 | my @iface_config = (); |
65 | push @iface_config, "vxlan-id $tag"; | |
63586d2f AD |
66 | push @iface_config, "vxlan-local-tunnelip $ifaceip" if $ifaceip; |
67 | push @iface_config, "bridge-learning off"; | |
68 | push @iface_config, "bridge-arp-nd-suppress on"; | |
69 | ||
70 | push @iface_config, "mtu $mtu" if $mtu; | |
1de0abc0 | 71 | push(@{$config->{$vxlan_iface}}, @iface_config) if !$config->{$vxlan_iface}; |
63586d2f AD |
72 | |
73 | #vnet bridge | |
74 | @iface_config = (); | |
75 | push @iface_config, "address $ipv4" if $ipv4; | |
76 | push @iface_config, "address $ipv6" if $ipv6; | |
77 | push @iface_config, "hwaddress $mac" if $mac; | |
1de0abc0 | 78 | push @iface_config, "bridge_ports $vxlan_iface"; |
63586d2f AD |
79 | push @iface_config, "bridge_stp off"; |
80 | push @iface_config, "bridge_fd 0"; | |
81 | push @iface_config, "mtu $mtu" if $mtu; | |
82 | push @iface_config, "alias $alias" if $alias; | |
83 | push @iface_config, "ip-forward on" if $ipv4; | |
84 | push @iface_config, "ip6-forward on" if $ipv6; | |
85 | push @iface_config, "arp-accept on" if $ipv4||$ipv6; | |
1de0abc0 | 86 | push @iface_config, "vrf $vrf_iface" if $vrf_iface; |
63586d2f AD |
87 | push(@{$config->{$vnetid}}, @iface_config) if !$config->{$vnetid}; |
88 | ||
1de0abc0 | 89 | if ($vrf_iface) { |
63586d2f AD |
90 | #vrf interface |
91 | @iface_config = (); | |
92 | push @iface_config, "vrf-table auto"; | |
1de0abc0 | 93 | push(@{$config->{$vrf_iface}}, @iface_config) if !$config->{$vrf_iface}; |
63586d2f AD |
94 | |
95 | if ($vrfvxlan) { | |
96 | #l3vni vxlan interface | |
1de0abc0 | 97 | my $iface_vrf_vxlan = "vrfvx_$zoneid"; |
63586d2f AD |
98 | @iface_config = (); |
99 | push @iface_config, "vxlan-id $vrfvxlan"; | |
100 | push @iface_config, "vxlan-local-tunnelip $ifaceip" if $ifaceip; | |
101 | push @iface_config, "bridge-learning off"; | |
102 | push @iface_config, "bridge-arp-nd-suppress on"; | |
103 | push @iface_config, "mtu $mtu" if $mtu; | |
1de0abc0 | 104 | push(@{$config->{$iface_vrf_vxlan}}, @iface_config) if !$config->{$iface_vrf_vxlan}; |
63586d2f AD |
105 | |
106 | #l3vni bridge | |
1de0abc0 | 107 | my $brvrf = "vrfbr_$zoneid"; |
63586d2f | 108 | @iface_config = (); |
1de0abc0 | 109 | push @iface_config, "bridge-ports $iface_vrf_vxlan"; |
63586d2f AD |
110 | push @iface_config, "bridge_stp off"; |
111 | push @iface_config, "bridge_fd 0"; | |
112 | push @iface_config, "mtu $mtu" if $mtu; | |
1de0abc0 | 113 | push @iface_config, "vrf $vrf_iface"; |
63586d2f AD |
114 | push(@{$config->{$brvrf}}, @iface_config) if !$config->{$brvrf}; |
115 | } | |
116 | } | |
117 | ||
118 | return $config; | |
119 | } | |
120 | ||
121 | sub on_update_hook { | |
a2b32a94 AD |
122 | my ($class, $zoneid, $zone_cfg, $controller_cfg) = @_; |
123 | ||
124 | # verify that controller exist | |
125 | my $controller = $zone_cfg->{ids}->{$zoneid}->{controller}; | |
126 | if (!defined($controller_cfg->{ids}->{$controller})) { | |
127 | die "controller $controller don't exist"; | |
128 | } else { | |
129 | die "$controller is not a evpn controller type" if $controller_cfg->{ids}->{$controller}->{type} ne 'evpn'; | |
130 | } | |
63586d2f | 131 | |
7cb9714d | 132 | #vrf-vxlan need to be defined |
a2b32a94 AD |
133 | |
134 | my $vrfvxlan = $zone_cfg->{ids}->{$zoneid}->{'vrf-vxlan'}; | |
135 | # verify that vrf-vxlan is not already declared in another zone | |
136 | foreach my $id (keys %{$zone_cfg->{ids}}) { | |
137 | next if $id eq $zoneid; | |
138 | die "vrf-vxlan $vrfvxlan is already declared in $id" | |
139 | if (defined($zone_cfg->{ids}->{$id}->{'vrf-vxlan'}) && $zone_cfg->{ids}->{$id}->{'vrf-vxlan'} eq $vrfvxlan); | |
63586d2f AD |
140 | } |
141 | } | |
142 | ||
1d44ce70 AD |
143 | sub verify_tag { |
144 | my ($class, $tag) = @_; | |
145 | ||
146 | raise_param_exc({ tag => "missing vxlan tag"}) if !defined($tag); | |
147 | raise_param_exc({ tag => "vxlan tag max value is 16777216"}) if $tag > 16777216; | |
148 | } | |
149 | ||
63586d2f AD |
150 | 1; |
151 | ||
152 |