Rephrasing my last e-mail: Working with open vswitch at the ovirt infrastructure level is NOT an easy task. Marcos From: Marcos Sungaila via Users <users(a)ovirt.org&gt; Sent: Monday, November 11, 2024 9:57 AM To: Tim Walsh <mr_tim_walsh(a)hotmail.com>; users(a)ovirt.org Subject: [ovirt-users] Re: [External] : open v-switch woes Tim, Working with open vswitch at the ovirt infrastructure level is an easy task. Here you have some steps to start with it. Deploying an OVN enabled system have the following requirements: * Stand-alone Engine installed on a bare metal or a VM outside the ovirt cluster. Running SHE is not possible since the default cluster will use Linux bridges, not openvswitch * No extra packages are required * After the Engine is deployed, create a new cluster, set the switch type to OVS and the default network provider to ovirt-provider-ovn * Add a host to the new cluster, note that migrating a host from a Linux bridge cluster to OVS may fail and may require you to clean-up all network configuration before joining the host to the right cluster. * In the network menu, you will need to create an ovn network for each tagged vlan, as well as for the untagged network you may have * If you enable network port security, you will need to create security groups and security rules before any communication can happen between instances, and to/from external ips Marcos From: Tim Walsh <mr_tim_walsh@hotmail.com<mailto:mr_tim_walsh@hotmail.com>> Sent: Friday, October 25, 2024 6:00 PM To: Marcos Sungaila <marcos.sungaila@oracle.com<mailto:marcos.sungaila@oracle.com>>; users@ovirt.org<mailto:users@ovirt.org> Subject: Re: [External] : [ovirt-users] open v-switch woes Yes, not only a desire to replicate the functionality of V-Switches on VM-Ware, but also to have an isolated test environment. Create a virtual firewall (using Opensense or pfSense or something) and create VMs behind the firewall that can all talk to each other, but the firewall only passes out the application traffic (for example a web app on Nginx, or Remote Desktop to the private Environment). Microsoft Hyper-V has "private" and "internal" switches that can be set up, (and thats the case on either a standalone or a cluster) so I figured oVirt must have something similar if not the same. these may or may not necessarily be tagged to a VLAN on a physical switch. Thanks, Tim ________________________________ From: Marcos Sungaila <marcos.sungaila@oracle.com<mailto:marcos.sungaila@oracle.com>> Sent: Thursday, October 24, 2024 4:22 PM To: Tim Walsh <mr_tim_walsh@hotmail.com<mailto:mr_tim_walsh@hotmail.com>>; users@ovirt.org<mailto:users@ovirt.org> <users@ovirt.org<mailto:users@ovirt.org>> Subject: RE: [External] : [ovirt-users] open v-switch woes Hey Tim, Deploying an OVN-enabled cluster is not that trivial. There are many caveats to make it run. Is there any special use case you need to address to use OVS/OVN? Marcos From: Tim Walsh <mr_tim_walsh@hotmail.com<mailto:mr_tim_walsh@hotmail.com>> Sent: Thursday, October 24, 2024 12:28 AM To: users@ovirt.org<mailto:users@ovirt.org> Subject: [External] : [ovirt-users] open v-switch woes Hey community, I'm trying to get open v-switch set up to work like it does in VMware. I am running Rocky Linux 8.9 and oVirt 4.5.5 (el8) I got the repos but online feedback recommends installing openvswitch, and ovn-northd, ovn-central and ovn-host I got openvswitch installed, but the other three: ovn-northd, ovn-central and ovn-host seemt o be elusive even after adding the CentOS-Advanced-Virtualization.repo and uipdating all "CentOS-" repost to point to "vault" instead of "mirrorlist" Can someo0ne help me with what I'm missing? I've tried Bing CoPilot and ChatGPT LOL but they say add that repo and install those packages. Thanks, Tim