# network interface settings; autogenerated # Please do NOT modify this file directly, unless you know what # you're doing. # # If you want to manage parts of the network configuration manually, # please utilize the 'source' or 'source-directory' directives to do # so. # PVE will preserve these directives, but will NOT read its network # configuration from sourced files, so do not attempt to move any of # the PVE managed interfaces into external files! auto lo iface lo inet loopback auto eno1 iface eno1 inet manual auto eno2 iface eno2 inet manual iface eno3 inet manual iface eno4 inet manual auto bond0 iface bond0 inet manual bond-slaves eno1 eno2 bond-miimon 100 bond-mode 802.3ad bond-xmit-hash-policy layer2+3 auto vmbr0 iface vmbr0 inet static address 85.209.118.134/28 gateway 85.209.118.129 bridge-ports bond0 bridge-stp off bridge-fd 0 #Main bridge for public VMs iface vmbr0 inet6 static address 2a09:94c4:55d1:7680::86/64 gateway 2a09:94c4:55d1:7680::1 auto vmbr1 iface vmbr1 inet manual address 10.2.1.1/24 bridge-ports none bridge-stp off bridge-fd 0 #Internal bridge for VMs auto vmbr2 iface vmbr2 inet static address 192.168.1.1/24 bridge-ports none bridge-stp off bridge-fd 0 #NAT bridge for VMs that need masquerading post-up echo 1 > /proc/sys/net/ipv4/ip_forward post-up iptables -t nat -A POSTROUTING -s '192.168.1.0/24' -o vmbr0 -j MASQUERADE post-up iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 19022 -j DNAT --to 192.168.1.144:19022 post-down iptables -t nat -D POSTROUTING -s '192.168.1.0/24' -o vmbr0 -j MASQUERADE post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 19022 -j DNAT --to 192.168.1.144:19022 source /etc/network/interfaces.d/*