1

I'm fighting with the following problem.

  • I got an Hetzner dedicated Server with multiple additional IPs which I want to use for KVM VMs. (MainIP = 1.1.1.1, First additional IP: 2.2.2.2)
  • Before my server was running Ubuntu 16.04 and acts as a router for the VMs. So every VM had its own public IPv4 and the gateway was the host itself. This was working very well!

I followed this:
https://wiki.hetzner.de/index.php/Netzkonfiguration_CentOS

and

https://wiki.hetzner.de/index.php/KVM_mit_Nutzung_aller_IPs_aus_Subnetz

How can I do that with Fedora 32 using Firewalld, Nftables and NetworkManager enabled?
I tried following the guide and adapting the commands for Fedora. At the moment I got one VM running on br0 Host-Device.

KVM-Diagram 1

KVM-Diagram 1

KVM-Diagram 2

KVM-Diagram 2

5
  • 1
    Go to the first link and skip most everything and go directly to «3 Zusätzliche IP-Adressen (Virtualisierung)». Use the «Routed (brouter)» instructions. There are several other ways to do this, including ones not listed in the Hetzner wiki, but this is the easiest and doesn't break IPv6. The configuration you describe having before corresponds to the «Bridged» section, so you could do that as well. But you have to get MAC addresses out of the Robot to use. I don't use or recommend it because it breaks IPv6 for the VMs, and since it's the 21st century, everyone needs to be using IPv6. – Michael Hampton Jul 9 '20 at 16:14
  • Hi, yes i tried following this part but it did not work, even if i have systemctl stop firewalld... any other ideas? I attached two screenshots which shows my setup. – Marcwa19197 Jul 9 '20 at 16:42
  • i think i got it working now. but can i also add multiple bridges with the same host ip? – Marcwa19197 Jul 9 '20 at 20:13
  • You only need one bridge. All the VMs can use it. – Michael Hampton Jul 9 '20 at 20:21
  • Okay,got it thank you! But is it also possible to have an bridge for every KVM? SO i can create separate firewall zones – Marcwa19197 Jul 9 '20 at 20:30

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.