We currently have 2 bare metals. One holds the ovirt and the other proxmox. As to enable high availability and config sync on the proxmox hosted VMs we have deployed VyOS on both hyper-visors. We then use L2TPv3 as to extend VM networks from proxmox to ovirt and vice versa. When that was finalized and all VMs were activated in ovirt we would delete proxmox and deploy ovirt and re-do the same think as to re-enable VM high availability. The issue is that VM Networks drop traffic towards the VyOS VM even through we have enable mac-spoofing and promiscuous on the VM custom properties. The VM Networks must drop frames for destination MAC addresses not directly hosted on it and i don't know how to disable/bypass that.

VyOS is installed on the ovirt node VLAN approach is not feasible unfortunatelly. VyOS VM on oVirt should forward Layer 2 traffic over ovirtmgmt network. So from oVirt's perspective there is no tunneling. I have disabled all filters on the VM Network by selecting Network Port Security: Disabled I have created a VM Network with no filters on ovirt named auth_net with the following parameters: 1. VM Network, check 2. MTU, custom 2000 3. Create on external provider, check 3a. External provider: ovirt-provider-ovn 3b. Network Port Security: Disabled This is done as to allow me to attach VMs to this network. I have attached 3 VMs on this VM Network. A firewall with IP e.g. 10.0.0.1 The VyOS VM An LDAP VM with IP e.g. 10.0.0.5 The VyOS VM is attached to the auth_net with no IP address and with L2TPv3 via ovirtmgmt as to get the VM network Layer 2 traffic and forward it to the proxmox network through the VyOS routers. Even though i have not created any network filters traffic is dropped before reaching VyOS VM from the LDAP Auth server. TCPDUMP on the LDAP VM shows traffic leaving the LDAP VM. TCPDUMP on the VyOS VM does not show traffic reaching the vnic.

I have installed the vdsm hook for allow both promiscuous and mac-spoofing and have the same experience. So it is safe to assume that this cannot be supported in ovirt? I can connect to VMs through the internet and IPSEC, but i wanted to extend them. Do you know of any other way where i can extend on VM network from ovirt to another hypervisor? Any idea will help. Appreciate the till now assistance.

Well this is where theory contradicts practice... Based on what you say layer 2 frames would traverse the VM Network bridge and reach VyOS vnic, which they do not. Layer 2 frames are dropped after leaving the VM and before reaching the VyOS vnic. In theory if the VM bridge did not know where they should be forwarded it should broadcast them to all attached ports, which again it is not been done. So i am not sure if it is a bug, or a feature... I agree Layer 3 would be the best way forward but we need layer 2 extension since the firewalls require it for high availability as well and we need pcsd VIPs attached to monitored services to have high availability.