I am currently building a private cloud cluster using Proxmox. My cluster contains a head node and two compute nodes.
My head node hosts a NAT server and openvpn server, and three NICs: one for outbound & one per compute node. The NAT allows me to interface with both compute nodes. On both compute nodes I am hosting a router with ~30 vlans per router.
My goal is to be able to see the address from the vpn client when connecting to the routers. Currently, I connect to the head using the vpn, then attempt to either ping or ssh to the router and it shows the connection as coming from the head node's ip address. Any help is greatly appreciated!
My routes are as follows:
default via *.*.*.1 dev eno1 onlink
10.10.1.0/24 via 10.10.1.2 dev tun0
10.10.1.2 dev tun0 proto kernel scope link src 10.10.1.1
*.*.*.0/25 dev eno1 proto kernel scope link src *.*.*.46
192.168.0.0/19 via 192.168.77.1 dev vmbr0
192.168.32.0/19 via 192.168.76.6 dev vmbr1
192.168.76.0/24 dev vmbr1 proto kernel scope link src 10.10.1.1
192.168.77.0/24 dev vmbr0 proto kernel scope link src 192.168.77.1
And the NAT rule (I am currently using firewalld):
-A POST_public_allow ! -o lo -j MASQUERADE