If you're adding an interface then normally it's relatively easy, if somewhat annoying to swap things around.Can you post a diagram or list showing your desired before and after states? It sounds like you've got a lot of moving parts which can add to the complexity.
For Proxmox at least, don't forget that after adding a device that uses pcie lanes like nvme, hba or nics, the order of them changes and VMs need to be reconfigured to reflect.What I've learned to do is disable autostart of VMs before shutting down. Then add hardware. Then boot and compare VM config device ids against the what shows in the console.
Basically to explain you what/why I wanted to change this scheme -- historically I've had all the traffic of that OPNsense (was something else before/big up for OPNsense, way better...) passing through another main NGFW. That main NGFW had all the needed objects/policies enabled to reach potential services behind the OPNsense... This was to simplify the design at the time (single WAN uplink).. Although, that main NGFW is somewhat of a personal playground which means that conducting maintenance on that one would had disrupted the OPNsense box connectivity -- fact which I wanted to change because newly so, there are now peoples behind the OPNsense box, whooohooo...
Well the problem here most likely lied in between the chair and the keyboard =)Thanks a lot for your help,Cheers,m.
Quote from: cookiemonster on March 01, 2024, 05:15:14 pmFor Proxmox at least, don't forget that after adding a device that uses pcie lanes like nvme, hba or nics, the order of them changes and VMs need to be reconfigured to reflect.What I've learned to do is disable autostart of VMs before shutting down. Then add hardware. Then boot and compare VM config device ids against the what shows in the console.Fun. I've only just started playing with proxmox and haven't done any pcie passthrough yet.
It is good but there are some gotchas like this one that can bite. Some hardware is better than others for pcie passthrough. You'll soon need to start reading about iommu groups that some motherboards are better for it.