Each of both PVE has 1 VM for firewall and several other VMs, organized in subnetworks, addressed with RFC1918, according to the this diagram
For better understanding, this is the networking addressing:
PVE01 - Net 01 - 172.1.10.0/27
PVE01 - Net 02 - 172.1.20.0/27
PVE01 - Net 03 - 172.1.30.0/27
PVE02 - Net 01 - 172.2.10.0/27
PVE02 - Net 02 - 172.2.20.0/27
PVE02 - Net 03 - 172.2.30.0/27
Actually, any server in the structure is able to communicate with any other server into the same PVE. The goal is having any VM of Server A communicating with any VM of Server B and vice-versa. Both PVEs are already connected to the same VRack in OVH Web Manager (this is the best I could do following OVH documentation)
I want both firewalls to communicate through VRack. Anybody did such a configuration? If so, is there any documentation that can help me on how to configure both interfaces?
Each VM can communicate with other VMs on the same host, even in different virtual networks, because the host has routes for each virtual networks managed by itself. You can use
ip route
on each host to see that.You could solve that by adding static routes. On each host, you should manually add one route for each virtual networks on other hosts. If your infrastructure scales later with more hosts and virtual networks, it will not be convenient to maintain.
A better way would be a single router, physical or virtualized, and setup VLAN with openvswitch.