Re: [lxc-users] LAN for LXD containers (with multiple LXD servers)?

2016-09-21 Thread Ruzsinszky Attila
Hi, Why don't you make a test with OpenVSwitch? You can setup an SDN with it. TIA, Ruzsi ___ lxc-users mailing list lxc-users@lists.linuxcontainers.org http://lists.linuxcontainers.org/listinfo/lxc-users

Re: [lxc-users] LAN for LXD containers (with multiple LXD servers)?

2016-09-21 Thread Raymond Ferguson
Maybe a VPN container that peers with the other VPN containers and runs a dynamic routing protocol? Then just setup a route on the lxd host to the VPN guest. Make it config driven so you just push a new peer list to update. Or not and just push the updated container? On Sep 18, 2016 4:21 AM, "To

Re: [lxc-users] LAN for LXD containers (with multiple LXD servers)?

2016-09-20 Thread brian mullan
I got a response back from Tobias Volk (the PeerVPN author) He changed the bullet on the main web page to help clarify that there is no automatic tunnel through firewalls.. text was... *Automatically builds tunnels through firewalls and NATs without any further setup (for example, port forwarding

Re: [lxc-users] LAN for LXD containers (with multiple LXD servers)?

2016-09-20 Thread brian mullan
Serge, > > > > *> Automatically builds tunnels through firewalls and NATs without any > further> setup (for example, port forwarding).I would not appreciate > something which "automatically" (whatever itmeans) traverse my firewalls, > to be honest. We should treat our dataseriously, Brian.* Fir

Re: [lxc-users] LAN for LXD containers (with multiple LXD servers)?

2016-09-19 Thread Tomasz Chmielewski
On 2016-09-19 05:12, Tilak Waelde wrote: Hope this helps. Happy to share my LXD configurations with anyone... Please do! I'd really love to see a description of a production lxd / lxc setup with proper networking and multiple hosts! I haven't played around with it yet, but is it possible to i

Re: [lxc-users] LAN for LXD containers (with multiple LXD servers)?

2016-09-19 Thread Sergiusz Pawlowicz
On Mon, Sep 19, 2016 at 8:48 PM, brian mullan wrote: > Automatically builds tunnels through firewalls and NATs without any further > setup (for example, port forwarding). I would not appreciate something which "automatically" (whatever it means) traverse my firewalls, to be honest. We should tre

Re: [lxc-users] LAN for LXD containers (with multiple LXD servers)?

2016-09-19 Thread brian mullan
Tomasz After experimenting with TINC, OpenVPN & others I found and have used PeerVPN to do this: https://peervpn.net/ PeerVPN is a full-mesh VPN and is auto-learning.. - Ethernet tunneling support using TAP devices. - IPv6 support. - Full mesh network topology. - Automatically build

Re: [lxc-users] LAN for LXD containers (with multiple LXD servers)?

2016-09-18 Thread Tilak Waelde
Hope this helps. Happy to share my LXD configurations with anyone... -Ron Please do! I'd really love to see a description of a production lxd / lxc setup with proper networking and multiple hosts! I haven't played around with it yet, but is it possible to include some sort of VRF-lite[0] i

Re: [lxc-users] LAN for LXD containers (with multiple LXD servers)?

2016-09-18 Thread Sergiusz Pawlowicz
On Sun, Sep 18, 2016 at 7:11 PM, Tomasz Chmielewski wrote: > On 2016-09-18 21:05, Sergiusz Pawlowicz wrote: >> >> On Sun, Sep 18, 2016 at 4:16 PM, Tomasz Chmielewski >> wrote: >> >>> While I can imagine setting up many OpenVPN tunnels between all LXD >>> servers >> >> >> I cannot imagine that :-)

Re: [lxc-users] LAN for LXD containers (with multiple LXD servers)?

2016-09-18 Thread Ron Kelley
So, just for clarity, you are saying each LXD server will have no separate network connection for the containers. Thus, all containers are private to the LXD server, and any outbound traffic must traverse the container server interface. Is this correct? If so, sorry, I must have missed this r

Re: [lxc-users] LAN for LXD containers (with multiple LXD servers)?

2016-09-18 Thread Tomasz Chmielewski
On 2016-09-18 22:14, Ron Kelley wrote: (Long reply follows…) Personally, I think you need to look at the big picture for such deployments. From what I read below, you are asking, “how do I extend my layer-2 subnets between data centers such that container1 in Europe can talk with container6 in

Re: [lxc-users] LAN for LXD containers (with multiple LXD servers)?

2016-09-18 Thread Ron Kelley
(Long reply follows…) Personally, I think you need to look at the big picture for such deployments. From what I read below, you are asking, “how do I extend my layer-2 subnets between data centers such that container1 in Europe can talk with container6 in Asia, etc”. If this is true, I think

Re: [lxc-users] LAN for LXD containers (with multiple LXD servers)?

2016-09-18 Thread Tomasz Chmielewski
On 2016-09-18 21:05, Sergiusz Pawlowicz wrote: On Sun, Sep 18, 2016 at 4:16 PM, Tomasz Chmielewski wrote: While I can imagine setting up many OpenVPN tunnels between all LXD servers I cannot imagine that :-) :-) Use tinc, mate. Your life begins :-) https://www.tinc-vpn.org/ I did some r

Re: [lxc-users] LAN for LXD containers (with multiple LXD servers)?

2016-09-18 Thread Sergiusz Pawlowicz
On Sun, Sep 18, 2016 at 4:16 PM, Tomasz Chmielewski wrote: > While I can imagine setting up many OpenVPN tunnels between all LXD servers I cannot imagine that :-) :-) Use tinc, mate. Your life begins :-) https://www.tinc-vpn.org/ cheers, Serge ___ l

Re: [lxc-users] LAN for LXD containers (with multiple LXD servers)?

2016-09-18 Thread Micky Del Favero
Tomasz Chmielewski writes: > While I can imagine setting up many OpenVPN tunnels between all LXD > servers (LXD1-LXD2, LXD1-LXD3, LXD2-LXD3) and constantly adjusting the > routes as containers are stopped/started/migrated, it's a bit of a > management nightmare. And even more so if the number of

[lxc-users] LAN for LXD containers (with multiple LXD servers)?

2016-09-18 Thread Tomasz Chmielewski
It's easy to create a "LAN" for LXD containers on a single LXD server - just attach them to the same bridge, use the same subnet (i.e. 10.10.10.0/24) - done. Containers can communicate with each other using their private IP address. However, with more then one LXD server *not* in the same LAN