<div dir="ltr"><div><div><div>Hi,<br><br></div>Please check out this deep dive to see how the OVN provider is set up:<br><a href="https://www.youtube.com/watch?v=vGeouWfKJwA&t=10s">https://www.youtube.com/watch?v=vGeouWfKJwA&t=10s</a><br><br></div>By adding a subnet to the external network you will get a dhcp server<br>on this network that will use the defined subnet.<br><br></div><div>Try using affinity groups to make our VM come up on a specific groups.<br><br></div><div>To allow to connect your nic with the public IP you can connect it<br></div><div>to the vm as a passtrough device. Adding one more NIC connected<br></div><div>to an OVN network would give you a VM connected to both.<br></div><div><br></div><div>Another (not so clean) possiblity is to create an ovirt network, add<br></div><div>it to the host, and connect the VM to it. On the host you will see<br></div><div>that a bridge will be created for the network. You could then add<br></div><div>your NIC that goes to the remote networks to the bridge created for <br></div><div>the network on your host (manual action). <br></div><div>This would also be possible using an OVN network with just the<br></div><div>single NIC from that VM connected, and the external NIC plugged<br></div><div>into the OVS bridge used for OVN (with manual OVN configuration).<br><br></div><div><div><div><br><br><br><br></div><br><div><br></div></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Aug 23, 2017 at 11:32 AM, Mitch <span dir="ltr"><<a href="mailto:mitchinseattle2014@gmail.com" target="_blank">mitchinseattle2014@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<br>
I am trying to understand the best way to structure our network with oVirt.<br>
<br>
We have a number of servers hosted in a remote datacenter, all with a<br>
single NIC with a single public IP.<br>
<br>
One server also has a /26 subnet mapped to it which we have to present<br>
on a specific MAC address.<br>
<br>
What I am trying to do is have all our VMs on a private subnet<br>
<a href="http://10.2.3.0/24" rel="noreferrer" target="_blank">10.2.3.0/24</a> for example, and use OVN to make that subnet available<br>
across all oVirt hosts, (PeerVPN and Tinc are also options I’m looking<br>
at).<br>
<br>
On the single host with the /26 on it, I plan to run an instance of<br>
Opnsense or similar as a VM, with two NICs, one bridged to eth0 with<br>
the specific MAC required for the public subnet, and one that will<br>
connect to the private virtual network, I could then do 1-to-1 NAT for<br>
those hosts on the private network that need to be publically<br>
accessible.<br>
<br>
I know this isn’t the ideal setup, but we have to work with in the<br>
constraints required by the datacenter we are using.<br>
<br>
Unfortunately I can’t work out how to configure this in oVirt, I<br>
assume I need to set up a logical network for the private subnet,<br>
using OVN as an external provider, and set up another logical subnet<br>
for the public address space and attach that to a specific host in the<br>
cluster?<br>
<br>
For the public address space, how do I bridge that to eth0 and give it<br>
a specific MAC address? Also how can I ensure my Opnsense VM comes up<br>
on a specific host?<br>
<br>
For the private network, is OVN the best approach, or am I better off<br>
looking at other mesh VPN solutions to build an internal network<br>
across our oVirt hosts?<br>
<br>
Any comments or suggestions will be greatly appreciated.<br>
<br>
Thanks :)<br>
______________________________<wbr>_________________<br>
Users mailing list<br>
<a href="mailto:Users@ovirt.org">Users@ovirt.org</a><br>
<a href="http://lists.ovirt.org/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.ovirt.org/<wbr>mailman/listinfo/users</a><br>
</blockquote></div><br></div>