Alexandre Derumier
110b881d49
evpn : add "ip route del vrf vrf_myzone unreachable default metric 4278198272" on exit node
...
This is breaking routing between the evpn vrf && default vrf leak on exit node only
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-08-24 14:25:02 +02:00
Thomas Lamprecht
8591dacbff
Revert "evpn : remove "ip route add vrf vrf_myzone unreachable default metric 4278198272" on exit node"
...
replaced by another series
https://lists.proxmox.com/pipermail/pve-devel/2021-August/049771.html
This reverts commit 95e2f20f5c
.
2021-08-24 14:23:53 +02:00
Alexandre Derumier
bb95abb0af
get_local_vnets: add permissions on /sdn/vnets/*
...
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-08-23 18:19:48 +02:00
Alexandre Derumier
95e2f20f5c
evpn : remove "ip route add vrf vrf_myzone unreachable default metric 4278198272" on exit node
...
This is breaking routing between the evpn vrf && default vrf leak on exit node only
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-07-21 09:38:13 +02:00
Thomas Lamprecht
6949fc0152
bump version to 0.6.1
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-07-05 19:07:55 +02:00
Alexandre Derumier
34c4c6d74f
subnets/ipam : fix is_gateway
...
- add lost is_gateway in subnets subnet when creating subnet
- allow reuse ip as gateway in subnet create if it's already flagged gateway in the ipamdb
- add tests
2021-06-18 18:29:15 +02:00
Alexandre Derumier
9f1e793423
vnets: subroutines: return if !$vnetid
2021-06-18 18:29:15 +02:00
Alexandre Derumier
3c0fc96d9c
add vnets test + ipam fixes
...
- add vnets tests with multiple subnets
- fix pve ipam ipv6 with next_free_ip (ipv6 don't have network && broadcast address)
- fix vnet next_free_ip with no ipam
2021-06-18 18:29:15 +02:00
Alexandre Derumier
3d8799db81
sdn: get_local_vnets : add ipam && vlanaware values
...
to be able to use them in ui bridgeselector
2021-06-18 18:29:15 +02:00
Thomas Lamprecht
c72266faee
bump version to 0.6.0
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-05-10 10:45:56 +02:00
Thomas Lamprecht
4686176d29
d/source: switch to native versioning
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-05-10 10:45:53 +02:00
Alexandre Derumier
bdec70894d
zones: simple|evpn : only enable ip-forward if gateway is defined on the subnet
...
or ifquery report an error
2021-05-10 09:38:14 +02:00
Alexandre Derumier
d6557a2dcd
subnets: fix add|del subnets withtout ipam
2021-05-10 09:37:16 +02:00
Alexandre Derumier
bf8761e9fa
subnets: tests: add noipam test
2021-05-10 09:37:16 +02:00
Thomas Lamprecht
7f50761859
api: zones: code/indentation/format cleanups
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-05-05 12:16:26 +02:00
Alexandre Derumier
690d3f7d4f
api2: zone: check ipam change if no ipam was defined before too
...
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-05-05 12:07:47 +02:00
Thomas Lamprecht
26dedb18bc
qinq: code cleanup and whitespace/indendation fixes
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-05-05 08:25:49 +02:00
Alexandre Derumier
403b05e2c1
zone: qinq: add vnet without tag support
...
some user want to be able to define a vnet without vlan,
so at qinq zone level, to be able to see traffic from others vnets of this
qinq zone.
Some example of usage is a inter-vnet firewall/gateway vm.
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-05-05 07:39:05 +02:00
Thomas Lamprecht
90c150b25b
d/control: fix description
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-05-05 07:20:14 +02:00
Alexandre Derumier
de795a53d0
zones: qinq: vlanaware bridge: add tests with multiple vnets/zones
...
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-29 13:29:07 +02:00
Alexandre Derumier
2fa5d39288
zones: qinq: classic bridge: fix bridge zone name with multiple zones/vnets
...
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-29 13:29:07 +02:00
Alexandre Derumier
d8c88170fd
zones: qinq: ovs: fix duplicate ovs_ports with multiple zones/vnets
...
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-29 13:29:07 +02:00
Thomas Lamprecht
baf955953f
bump version to 0.5-2
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-28 18:26:15 +02:00
Thomas Lamprecht
153cb80d4c
zone status: mark vnets with unknown zone as failed
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-28 16:42:20 +02:00
Thomas Lamprecht
6b0bf99c13
possible bug fix for falsy named zones
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-28 16:38:42 +02:00
Thomas Lamprecht
65723efd38
code/whitespace cleanup
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-28 16:38:42 +02:00
Thomas Lamprecht
d73c7c3668
sdn: rename config to running_config
...
to reduce my confusion..
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-28 16:38:42 +02:00
Thomas Lamprecht
57a335c4c0
zones: IPAM config is optional for a zone
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-28 13:45:25 +02:00
Thomas Lamprecht
65cb893e27
zones: code/indendation cleanup
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-28 13:45:11 +02:00
Thomas Lamprecht
2f1e0d01e8
bump version to 0.5-1
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-26 16:51:38 +02:00
Thomas Lamprecht
7eeb790f72
d/control: bump versioned dependency for pve-cluster
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-26 16:11:36 +02:00
Alexandre Derumier
c08eeb0f95
controllers: increase controllerid to 64 characters max
...
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-22 10:05:52 +02:00
Alexandre Derumier
1ba4901e03
zones: simple: fix ip-forward && ipv6 snat
...
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-22 10:05:52 +02:00
Alexandre Derumier
645d5f4e62
zones: evpn: fix arp-accept && ip-forward + ipv6 snat
...
they were lost during subnet work
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-22 10:05:52 +02:00
Alexandre Derumier
8313a2c0c6
zones: evpn: move vnet mac option to evpn zone plugin
...
This is only used by evpn plugin, and we can have
same anycast mac for all vnets like cisco,juniper,arista...
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-22 10:05:52 +02:00
Alexandre Derumier
4083537ba6
bgp: add ebgp_multihop option
...
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-22 10:05:52 +02:00
Alexandre Derumier
a8fb936da7
tests: fix evpn vrf
...
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-22 10:05:52 +02:00
Alexandre Derumier
5221635a52
tests: add subnets tests
...
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-18 18:22:58 +02:00
Alexandre Bruyelles
d9ee954447
zones: evpn: add a default unreachable, to prevent vrf leak
...
On Linux, when no route is found in a vrf, it somehow fallback
to the default routing table. In our case, that means a leak
from the overlay to the underlay.
Adding a low priority unreachable catch-all route is the way to go, as
per the doc: https://www.kernel.org/doc/Documentation/networking/vrf.txt
Signed-off-by: Alexandre Bruyelles <git@jack.fr.eu.org>
2021-04-09 12:55:40 +02:00
Thomas Lamprecht
dd510e8a11
d/control: record libnet-subnet-perl build dependency
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-02-06 14:56:34 +01:00
Alexandre Derumier
533eb3d4e6
fix coding style NetAddr::IP->new
...
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:56:34 +01:00
Alexandre Derumier
77ec7eb206
subnets: add add_subnet/del_subnet
...
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00
Alexandre Derumier
b61e93a5c6
subnets: convert dns private function to public sub
...
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00
Alexandre Derumier
718ac053d4
tests: add dns tests
...
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00
Alexandre Derumier
15a0b35c4d
dns: add noerr param
...
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00
Alexandre Derumier
79be833df6
tests: add ipams tests
...
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00
Alexandre Derumier
04f6db9acd
ipams: add noerr param
...
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00
Alexandre Derumier
3f02d3ec2f
ipam: phpipam: rename get_internal to get_prefix_id (like netbox)
...
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00
Alexandre Derumier
0d2396b0ff
dns: add update record && fix powerdns
...
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00
Alexandre Derumier
0720c17e0e
subnets: fix del_ip rollback
...
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00