LXD networking with vlan trunks

LXD
1

Running Ubuntu 19.10. I have multiple nics on host, all tagged trunks (different sets of vlans on each trunk). Using netplan (tried many times) never seems to work. Installed open-vswitch, using fake bridges – this works but leave old vethXXXXX in the ovsdb. I believe that there is is an option (set other_config: transient=“true”) that would erase these old veth, I do not know how to get lxd to set this when a veth is created.
Net, net – what is the best way to deal with trunks on host, where I want to connect specific vlans to specific lxd containers

Thank you

2

Firstly ditch netplan, deleted and set it unused in Grub default.

I installed ifupdown and then used openvpnswitch which seemed to work. I tested it with bonded port-channel to my 3560G switch and tagging vlans down that. Basically the vlans terminate to specific “ports” on the bridge … Like this which is my old config on a HP microserver…

source /etc/network/interfaces.d/*

# The loopback network interface
auto lo
iface lo inet loopback
 
auto lo:99
iface lo:99 inet static
  address 172.16.6.10
  netmask 255.255.255.255
 
 
 
 
# The Management network interface
# Add this to linux VRF
allow-bridge0 br_mgmt
iface br_mgmt inet static
        ovs_type OVSIntPort
        ovs_bridge bridge0
        ovs_options vlan_mode=access tag=193
        address 10.10.193.5
        netmask 255.255.255.0
        dns-nameservers 8.8.8.8 1.1.1.1
        dns-search bram.wizznet.co.uk
        post-up ip link add mgmt type vrf table 10
        post-up ip link set dev mgmt up
        post-up ip rule add iif mgmt table 10
        post-up ip rule add oif mgmt table 10
        post-up ip link set dev br_mgmt master mgmt
        post-up ip route add default via 10.10.193.1 table 10
 
### Bonded interfaces
 
auto enp2s0f0
iface enp2s0f0 inet manual
 
auto enp2s0f1
iface enp2s0f1 inet manual
 
 
allow-bridge0 bond0
iface bond0 inet manual
  ovs_bridge bridge0
  ovs_type OVSBond
  ovs_bonds enp2s0f0 enp2s0f1
  ovs_options bond_mode=balance-tcp lacp=active other-config:lacp-time=slow other_config:lacp-fallback-ab=true tag=1 vlan_mode=native-untagged trunks=1,5,10,80,88,193,616,617
 
auto bridge0
allow-ovs bridge0
iface bridge0 inet manual
  ovs_type OVSBridge
  ovs_ports bond0 vlan_88 vlan_616 vlan_617 br_mgmt vmbr98 internet_666
  up /etc/network/if-up.d/vlans
 
allow-bridge0 vlan_88
  iface vlan_88 inet static
  ovs_type OVSIntPort
  ovs_bridge bridge0
  ovs_options vlan_mode=access tag=88
  address 10.10.88.11
  netmask 255.255.255.0
  up ip route add 10.10.0.0/16 via 10.10.88.1
  dns-nameservers 1.1.1.1 9.9.9.9 8.8.4.4
 
# Dreambox VRF inside
 
allow-bridge0 vlan_616
  iface vlan_616 inet manual
  ovs_type OVSIntPort
  ovs_bridge bridge0
  ovs_options vlan_mode=access tag=616
 
# Dreambox VRF outside
 
allow-bridge0 vlan_617
  iface vlan_617 inet manual
  ovs_type OVSIntPort
  ovs_bridge bridge0
  ovs_options vlan_mode=access tag=617
 
 
#allow-bridge0 internet_666
#  iface internet_666 inet dhcp
#  ovs_type OVSIntPort
#  ovs_bridge bridge0
#  ovs_options vlan_mode=access tag=666 other-config:hwaddr="00:15:17:a0:29:80"
 
 
allow-bridge0 br_mgmt
iface br_mgmt inet static
  ovs_type OVSIntPort
  ovs_bridge bridge0
  ovs_options vlan_mode=access tag=193
  address 10.10.193.5
  netmask 255.255.255.0
  dns-nameserver 9.9.9.9 8.8.8.8 1.1.1.1
 
 
 
allow-bridge0 vmbr98
  iface vmbr98 inet static
  ovs_type OVSIntPort
  ovs_bridge bridge0
  ovs_options vlan_mode=access tag=98
  address 10.10.98.1
  netmask 255.255.255.0
1 Like