How are you doing HA? Have you passed through the NIC or are you just doing a NIC bridge (or whatever networking proxmox offers)?
Comment on For people using OpnSense who want some automatic snapshots.
ikidd@lemmy.dbzer0.com 1 week ago
I run my OPNsense as a proxmox VM, so I get high availability, replication, live backup and restore via PBS and update-time snapshots.
I couldn’t recommend this method more, it’s saved my ass repeatedly.
Appoxo@lemmy.dbzer0.com 1 week ago ikidd@lemmy.dbzer0.com 1 week ago
- Appoxo@lemmy.dbzer0.com 6 days ago
Very cool. Thanks for the pictures!
tofu@lemmy.nocturnal.garden 1 week ago
Depends on what you do with it I guess. It’s my gateway between my family LAN and my homelab LANs, and also the DHCP server for the latter. It’s supposed to be up when the proxmox cluster boots and all nodes would need 3 NICs for HA to work, and all be directly connected to the family LAN (in which they aren’t supposed to be).
ikidd@lemmy.dbzer0.com 1 week ago
Set the boot order in PVE. You can also group HA targets to shift as a group. I have a physical nic on WAN and LAN, and the LAN nic is VLANned for DMZ, guest, IOT, etc. As long as you keep them consistent from node to node, I’ve never had an issue.
MuttMutt@lemmy.world 1 week ago
I’ve never been comfortable virtualizing a router. Nearly anything else is not an issue.
ikidd@lemmy.dbzer0.com 1 week ago
It’s been amazing. The thing I like the most is being able to live-motion it to another node to upgrade the host then migrate back. Doesn’t drop a ping.
I’m using some ancient Dell rackmount servers for nodes, and a couple times the prime server dropped off entirely because of power issues, and I didn’t notice for a couple weeks that it had jumped hosts. I’ve also had to restore it from backup because of a borked upgrade, and it took maybe 5 minutes.
I thought that it would be a bad idea but I tried it with the original baremetal router that I lift and shifted to a VM then put the source on standby, and 5 years later, I would not go back.