ProxmoxVE 3.4 How to properly configure network interfaces?

Question

KVM

Good afternoon, dear colleagues who have already encountered the Proxmox setup are interested in the implementation of such a task.
The gateway is Mikrotik, it has 2 LAN ports, 1 port behind NAT, and on the second port 29 a subnet from the provider.
The machine with Proxmox will have 2 network cards, so I would like to configure it so that each KVM has 2 Ethernet adapters, the first one looks to the local area, and the second one, respectively, clings to IP from the 29th subnet in order to look outside. Well, accordingly, iptables will cover everything except port 80 on the external side.
I'm doing the installation right now, so I'm asking a question in advance.

Answer 1

A piece of an example from a live network, the essence is to create several vmbr interfaces and forward as many virtual machines as necessary, I have virtual machines and a dozen different interfaces.

auto lo
iface lo inet loopback
iface eth0 inet manual
iface eth1 inet manual
auto vmbr0
iface vmbr0 inet static
  address  195.114.ХХ.ХХ
  netmask  255.255.255.192
  gateway  195.114.ХХ.1
  bridge_ports eth0
  bridge_stp off
  bridge_fd 0

auto vmbr1
iface vmbr1 inet static
  address  10.1.1.1
  netmask  255.255.255.0
  bridge_ports eth1
  bridge_stp off
  bridge_fd 0

Answer 2

auto lo
iface lo inet loopback

auto vmbr0
iface vmbr0 inet static
        address 192.168.1.17
        netmask 255.255.255.0
        gateway 192.168.1.57
        bridge_ports eth0
        bridge_stp off
        bridge_fd 0

auto vmbr1
iface vmbr1 inet manual
        bridge_ports eth1
        bridge_stp off
        bridge_fd 0


auto vmbr2
iface vmbr2 inet manual
        bridge_ports eth2
        bridge_stp off
        bridge_fd 0

Answer 3

As far as I understand from the config, you assign several IPs to Debian?
Is it possible to make a virtual switch that would not occupy IP addresses, but KVM would draw IP from it?

Answer 4

Proxmox works with the Open-vswitch virtual switch, after installing open-vswitch it can be configured through the proxmox web interface. After that, for each network, you can create a bridge, add a physical interface to it, and the KVM interface there.