2 minutes ago, ken-ji said:

You can try making a request to Limetech, but you'll need to know what you need exactly (I'm not sure either)

 

Ok thanks for your help  in the meantime I will see if I find an alternative

On 3/28/2019 at 12:11 AM, ken-ji said:

You just need to create (and persist) a bridge device for your VMs to use.

create a xml file (ie /tmp/lab-network.xml)

<network ipv6='yes'>
  <name>lab-network</name>
  <bridge name="virbr1" stp="on" delay="0"/>
</network>

Then you enable the network with

virsh net-define /tmp/lab-network.xml

virsh net-start lab-network

 

This will create a bridge virbr1, which you can assign to your VMs.

There will be a host interface virbr1-nic (but will not be assigned an IP or any such automatically)

 

refer to https://libvirt.org/formatnetwork.html for more details on the xml file format

I read the entire thread but just to be sure before breaking everything.

I have a FW running in a VM, I have VMs and I have docker. All in Unraid

 

I want to create a "virtual NIC" attach it as a interface to the FW VM, and have it available to docker and other VMs. As far as I understood this is possible with the explanations given. Right?

One concern is the speed of the interface, currently I'm using 10gb nics, but this would liberate some of them for other purposes. So I guess the virtual nic will consume CPU, not a problem, but is there a way to know what would be the expected performance? how the new virtual adapters will appear in the VM's? as 1000 Mbps, full duplex? 10000? is there a way to configure this? is there any other configuration with better performance? I don't see anything related to this here https://libvirt.org/formatnetwork.html

 

Thanks

Edited October 3, 20232 yr by L0rdRaiden

I made a diagram because what I want to achieve is more complex than I thought

 

 

Is this even possible with unraid? a virtual switch with vlans? what would be the expected performance?

 

This is the firewall HA arq

Edited October 3, 20232 yr by L0rdRaiden

I think this draw is more clear

 

In this case the containers inside the docker bridge network would be visible to the firewall?

Or docker bridge mode will NAT everything?

I mean if a container in docker 0 communicate with a container in docker 1, what source an dest IP will I see in the firewall?

Have you had any luck with this? I've been trying to get something similar up and running.