Commit graph

534 commits

Author SHA1 Message Date
Alexandre Derumier 110b881d49 evpn : add "ip route del vrf vrf_myzone unreachable default metric 4278198272" on exit node
This is breaking routing between the evpn vrf && default vrf leak  on exit node only

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-08-24 14:25:02 +02:00
Thomas Lamprecht 8591dacbff Revert "evpn : remove "ip route add vrf vrf_myzone unreachable default metric 4278198272" on exit node"
replaced by another series
https://lists.proxmox.com/pipermail/pve-devel/2021-August/049771.html

This reverts commit 95e2f20f5c.
2021-08-24 14:23:53 +02:00
Alexandre Derumier bb95abb0af get_local_vnets: add permissions on /sdn/vnets/*
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-08-23 18:19:48 +02:00
Alexandre Derumier 95e2f20f5c evpn : remove "ip route add vrf vrf_myzone unreachable default metric 4278198272" on exit node
This is breaking routing between the evpn vrf && default vrf leak  on exit node only

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-07-21 09:38:13 +02:00
Thomas Lamprecht 6949fc0152 bump version to 0.6.1
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-07-05 19:07:55 +02:00
Alexandre Derumier 34c4c6d74f subnets/ipam : fix is_gateway
- add lost is_gateway in subnets subnet when creating subnet
- allow reuse ip as gateway in subnet create if it's already flagged gateway in the ipamdb
- add tests
2021-06-18 18:29:15 +02:00
Alexandre Derumier 9f1e793423 vnets: subroutines: return if !$vnetid 2021-06-18 18:29:15 +02:00
Alexandre Derumier 3c0fc96d9c add vnets test + ipam fixes
- add vnets tests with multiple subnets
- fix pve ipam ipv6 with next_free_ip (ipv6 don't have network && broadcast address)
- fix vnet next_free_ip with no ipam
2021-06-18 18:29:15 +02:00
Alexandre Derumier 3d8799db81 sdn: get_local_vnets : add ipam && vlanaware values
to be able to use them in ui bridgeselector
2021-06-18 18:29:15 +02:00
Thomas Lamprecht c72266faee bump version to 0.6.0
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-05-10 10:45:56 +02:00
Thomas Lamprecht 4686176d29 d/source: switch to native versioning
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-05-10 10:45:53 +02:00
Alexandre Derumier bdec70894d zones: simple|evpn : only enable ip-forward if gateway is defined on the subnet
or ifquery report an error
2021-05-10 09:38:14 +02:00
Alexandre Derumier d6557a2dcd subnets: fix add|del subnets withtout ipam 2021-05-10 09:37:16 +02:00
Alexandre Derumier bf8761e9fa subnets: tests: add noipam test 2021-05-10 09:37:16 +02:00
Thomas Lamprecht 7f50761859 api: zones: code/indentation/format cleanups
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-05-05 12:16:26 +02:00
Alexandre Derumier 690d3f7d4f api2: zone: check ipam change if no ipam was defined before too
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-05-05 12:07:47 +02:00
Thomas Lamprecht 26dedb18bc qinq: code cleanup and whitespace/indendation fixes
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-05-05 08:25:49 +02:00
Alexandre Derumier 403b05e2c1 zone: qinq: add vnet without tag support
some user want to be able to define a vnet without vlan,
so at qinq zone level, to be able to see traffic from others vnets of this
qinq zone.
Some example of usage is a inter-vnet firewall/gateway vm.

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-05-05 07:39:05 +02:00
Thomas Lamprecht 90c150b25b d/control: fix description
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-05-05 07:20:14 +02:00
Alexandre Derumier de795a53d0 zones: qinq: vlanaware bridge: add tests with multiple vnets/zones
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-29 13:29:07 +02:00
Alexandre Derumier 2fa5d39288 zones: qinq: classic bridge: fix bridge zone name with multiple zones/vnets
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-29 13:29:07 +02:00
Alexandre Derumier d8c88170fd zones: qinq: ovs: fix duplicate ovs_ports with multiple zones/vnets
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-29 13:29:07 +02:00
Thomas Lamprecht baf955953f bump version to 0.5-2
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-28 18:26:15 +02:00
Thomas Lamprecht 153cb80d4c zone status: mark vnets with unknown zone as failed
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-28 16:42:20 +02:00
Thomas Lamprecht 6b0bf99c13 possible bug fix for falsy named zones
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-28 16:38:42 +02:00
Thomas Lamprecht 65723efd38 code/whitespace cleanup
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-28 16:38:42 +02:00
Thomas Lamprecht d73c7c3668 sdn: rename config to running_config
to reduce my confusion..

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-28 16:38:42 +02:00
Thomas Lamprecht 57a335c4c0 zones: IPAM config is optional for a zone
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-28 13:45:25 +02:00
Thomas Lamprecht 65cb893e27 zones: code/indendation cleanup
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-28 13:45:11 +02:00
Thomas Lamprecht 2f1e0d01e8 bump version to 0.5-1
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-26 16:51:38 +02:00
Thomas Lamprecht 7eeb790f72 d/control: bump versioned dependency for pve-cluster
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-04-26 16:11:36 +02:00
Alexandre Derumier c08eeb0f95 controllers: increase controllerid to 64 characters max
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-22 10:05:52 +02:00
Alexandre Derumier 1ba4901e03 zones: simple: fix ip-forward && ipv6 snat
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-22 10:05:52 +02:00
Alexandre Derumier 645d5f4e62 zones: evpn: fix arp-accept && ip-forward + ipv6 snat
they were lost during subnet work

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-22 10:05:52 +02:00
Alexandre Derumier 8313a2c0c6 zones: evpn: move vnet mac option to evpn zone plugin
This is only used by evpn plugin, and we can have
same anycast mac for all vnets like cisco,juniper,arista...

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-22 10:05:52 +02:00
Alexandre Derumier 4083537ba6 bgp: add ebgp_multihop option
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-22 10:05:52 +02:00
Alexandre Derumier a8fb936da7 tests: fix evpn vrf
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-22 10:05:52 +02:00
Alexandre Derumier 5221635a52 tests: add subnets tests
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-04-18 18:22:58 +02:00
Alexandre Bruyelles d9ee954447 zones: evpn: add a default unreachable, to prevent vrf leak
On Linux, when no route is found in a vrf, it somehow fallback
to the default routing table. In our case, that means a leak
from the overlay to the underlay.
Adding a low priority unreachable catch-all route is the way to go, as
per the doc: https://www.kernel.org/doc/Documentation/networking/vrf.txt

Signed-off-by: Alexandre Bruyelles <git@jack.fr.eu.org>
2021-04-09 12:55:40 +02:00
Thomas Lamprecht dd510e8a11 d/control: record libnet-subnet-perl build dependency
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2021-02-06 14:56:34 +01:00
Alexandre Derumier 533eb3d4e6 fix coding style NetAddr::IP->new
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:56:34 +01:00
Alexandre Derumier 77ec7eb206 subnets: add add_subnet/del_subnet
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00
Alexandre Derumier b61e93a5c6 subnets: convert dns private function to public sub
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00
Alexandre Derumier 718ac053d4 tests: add dns tests
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00
Alexandre Derumier 15a0b35c4d dns: add noerr param
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00
Alexandre Derumier 79be833df6 tests: add ipams tests
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00
Alexandre Derumier 04f6db9acd ipams: add noerr param
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00
Alexandre Derumier 3f02d3ec2f ipam: phpipam: rename get_internal to get_prefix_id (like netbox)
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00
Alexandre Derumier 0d2396b0ff dns: add update record && fix powerdns
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00
Alexandre Derumier 0720c17e0e subnets: fix del_ip rollback
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2021-02-06 14:50:44 +01:00