Connecting an ip/27(vswitch hetzner) pool between three nodes. What is the config error?

Question

Hetzner

Hello.
The essence of the problem is that Hetzner issued an ip / 27 pool to use them in a Proxmox 6.2 cluster (can be used on nodes in a cluster for containers). According to the wiki instructions, hetzner says that you need to add a local subnet (let's say 10.0.0.0/24) with port 4000 (which is specified in the robot cabinet) by adding nodes to the vswitch port.
Add ifupdown for each node and virtual interface.

An example of the network config of one of the nodes.

source /etc/network/interfaces.d/*

auto lo
iface lo inet loopback

iface lo inet6 loopback
#белый ip ноды3
auto eno1
iface eno1 inet static
        address XXX.217.84.169/26
        gateway XXX.217.84.129
        up route add -net XXX.217.84.128 netmask 255.255.255.192 gw XXX.217.84.129 dev eno1

iface eno1 inet6 static
        address 2a01:4f9:4a:2096::2/64
        gateway fe80::1

#vswitch
auto eno1.4000
iface eno1.4000 inet static
        address 10.0.0.3/24
        mtu 1400
#IPv4 подсеть
        up ip addr add XXX.233.4.254/27 dev eno1.4000
        up ip rule add from XXX.233.4.254 lookup vswitch
        up ip rule add to XXX.233.4.254 lookup vswitch
        up ip route add default via XXX.233.4.225 dev eno1.4000 table vswitch
        down ip addr del XXX.233.4.254/27 dev eno1.4000
        down ip route del default via XXX.233.4.225 dev eno1.4000 table vswitch
        down ip rule del to XXX.233.4.254 lookup vswitch
        down ip rule del from XXX.233.4.254 lookup vswitch
#на этом этапе уже нода пингуется

#добавляю виртуальный интерфейс для контейнеров proxmox
auto vmbr0
iface vmbr0 inet manual
        address XXX.233.4.254/27
        bridge-ports none
        bridge-stp off
        bridge-fd 0
        #bridge-vlan-aware yes
        #bridge-vids 2-4094

This config releases only the proxmox node to the network via ip XXX.233.4.254, but containers with the config of the issued pool do not see the network.
What am I doing wrong?

Answer 1

source /etc/network/interfaces.d/*
auto lo
iface lo inet loopback
iface lo inet6 loopback
#interface to internet for node
auto enp0s31f6
iface enp0s31f6 inet static
address xxx.xxx.xxx.56/26
gateway xxx.xxx.xxx. 1
up route add -net xxx.xxx.xxx.0 netmask 255.255.255.192 gw xxx.xxx.xxx.1 dev enp0s31f6
# route xxx.xxx.xxx.0/26 via xxx.xxx.xxx.1
iface enp0s31f6.4000 inet manual
#vSwitch
auto vmbr5
iface vmbr5 inet static
address 10.0.0.1/24
bridge-ports enp0s31f6.4000
bridge-stp off
bridge-fd 0
bridge-vlan-aware yes
bridge-vids 2-4094
mtu 1400
This is how the vswitch subnet works with only specific lags, since hetzner says that all ip addresses from this subnet should go out with one poppy... Now I'm struggling with this problem...