====== SDN ======

Software Defined Network

  * **Zone** - upper level:
    * VMs are assigned to zones.
    * user permissions are applied to zones
    * zones are containers of ''VNets''
    * zone types:
      * **Simple** a simple bridge on single Proxmox node - no communication across the cluster.
        * usage: user friendly zone names instead of ''vmbrX'' interfaces. But still needs to specify VLAN tag for VLANs.
        * DHCP server and IPAM possible for zone
        * Outbound NAT to internet provided locally by each node
      * **VLAN** 
        * like above but with VLAN tag assigned
      * **QinQ** - 802.1Q tunnelling / stacked VLANs / 802.1ad
        * first VLAN tag in L2 frame is a provider / service vlan 
        * 2nd VLAN tag in L2 frame is customer tag
      * **VxLAN** RFC 7348 (tech preview) 
        * encapsulate L2 frames in L3 UDP packets.
        * L3 networks solves lots of forwarding/routing problems of L2 networks. No STP nor VLANs needed.
        * well known protocols like OSPF, EIGRP can be used for L3.
        * VNI tag is 24 bit (16 777 215 VxLANs)
        * one VxLAN is a group of Virtual Tunnels. VTEPs (Virtual Tunnel Endpoint) acts like switch
      * **EVPN** (tech preview)
  * **VNets** - lower 

[[https://pve.proxmox.com/wiki/Software-Defined_Network]]

[[https://pve.proxmox.com/wiki/Setup_Simple_Zone_With_SNAT_and_DHCP]]