Arama Yap Mesaj Submit
Request a Callback
+90
X
X

Select Your Currency

Turkish Lira $ US Dollar Euro
X
X

Select Your Currency

Turkish Lira $ US Dollar Euro

Contact Us

Location Halkali merkez neighborhood fatih st ozgur apt no 46 , Kucukcekmece , Istanbul , 34303 , TR
Last technical review · 17.08.2026 · PVE 9.2 SDN

Proxmox VE 9.2 SDN: WireGuard Fabric Across Sites + Automatic VM Placement

Two 9.2 features solve different problems: WireGuard-based SDN fabric connects node networks across sites, while the dynamic load balancer balances VM/CT placement across cluster resources. They are not the same kind of load balancer.

Production note

An overlay does not repair a broken underlay; it hides it. Adding WireGuard/BGP on top of packet loss or MTU mismatch makes troubleshooting harder.

proxmox 9.2 sdnproxmox wireguard fabricproxmox dynamic load balancer
TECHNICAL IMPLEMENTATION PROFILE
EKA CORE
PVE 9.2 SDN

Validate underlay IP connectivity, MTU and routing before adding an SDN overlay. Before enabling dynamic balancing, test migration networking, storage constraints and CPU-model compatibility.

WireGuardEncrypted fabric
Checked
BGPRoute exchange
Checked
EVPNPolicy tools
Checked
DLBVM/CT placement
Checked
Technical guide · production-focused · official sources
Quick answer

Validate underlay IP connectivity, MTU and routing before adding an SDN overlay. Before enabling dynamic balancing, test migration networking, storage constraints and CPU-model compatibility.

01

Technical scope at a glance

Understand Proxmox VE 9.2 WireGuard/BGP SDN fabric and dynamic load balancing with production topology, MTU, routing, migration and capacity safeguards.

WireGuardEncrypted fabric

9.2 introduces a WireGuard-based SDN fabric option.

BGPRoute exchange

Can participate in dynamic routing within the fabric design.

EVPNPolicy tools

9.2 expands route-map and prefix-list capabilities.

DLBVM/CT placement

Dynamic load balancing helps placement based on cluster resource balance.

On this page

  1. 1. Separate underlay, overlay and workload load balancing
  2. 2. Pass five underlay tests before enabling an overlay
  3. 3. Reserve MTU headroom for WireGuard encapsulation
  4. 4. Apply prefix filtering in BGP/EVPN policy
  5. 5. Make VMs portable before using dynamic load balancing
  6. 6. Validate with three failure scenarios
  7. Frequently asked questions
02

1. Separate underlay, overlay and workload load balancing

SDN fabric handles network reachability; dynamic placement handles compute placement. HTTP reverse proxies solve application traffic distribution.

LayerExampleProblem solved
UnderlayPhysical/VLAN IPNode-to-node transport
OverlayWireGuard/EVPNLogical segment reachability
PlacementDynamic load balancerVM/CT resource placement
L7HAProxy/NginxHTTP request distribution
03

2. Pass five underlay tests before enabling an overlay

IP routes, latency, loss, MTU and clock skew are baseline checks. Cross-site links also require attention to jitter and asymmetric routing.

Command
ip -br address
Command
ip route
Command
ping -c 20 PEER_IP
Command
tracepath PEER_IP
Command
chronyc tracking 2>/dev/null || timedatectl status
04

3. Reserve MTU headroom for WireGuard encapsulation

Blindly using a 1500-byte overlay MTU on a 1500-byte underlay can trigger fragmentation or PMTUD issues. Measure actual path MTU.

Command
tracepath PEER_IP
Command
ping -M do -s 1472 -c 3 PEER_IP
Command
ip link show
05

4. Apply prefix filtering in BGP/EVPN policy

Use 9.2 route-map and prefix-list controls to reduce accidental route leaks. “Redistribute everything” should not be a production default.

Define site prefixes with explicit allow lists.
Review default-route advertisement as a separate change.
Put route-leak rollback steps in the runbook.
06

5. Make VMs portable before using dynamic load balancing

Even if placement wants to move a VM, local-only storage, passthrough devices or CPU-model differences may block migration.

CheckWhy
StorageCan target node access disks?
CPU modelLive-migration compatibility
PCI passthroughHardware-bound VM may not move
Migration networkMigration time and production impact
07

6. Validate with three failure scenarios

A normal ping test is insufficient. Measure tunnel-peer loss, BGP route loss and compute-node drain scenarios.

Which segments fail when a tunnel peer is lost?
How many seconds does route convergence take?
Does placement respect target capacity after node drain?
EKA SUNUCU · TECHNICAL

Make the underlay reliable before adding an overlay

Plan 1/10/25G migration networks, VLANs and site-to-site topology for a Proxmox cluster on Eka Sunucu dedicated infrastructure.

Production principleMeasure → Test → DeployNo fabricated benchmark data.
SRC

Official sources

Primary documentation and technical references used by this guide.

EKA

Related technical guides

Continue with related infrastructure and implementation guides.

FAQ

Frequently asked questions

PVE 9.2 SDN

Does Proxmox dynamic load balancing distribute web traffic?

No. The 9.2 feature targets VM/CT workload placement and cluster resource balance; L7 HTTP load balancing is separate.

Does WireGuard SDN require public IPs?

Peers need IP-level reachability; whether that is public IP, routed private WAN or another transport depends on topology.

Why does MTU matter?

Tunnel encapsulation adds headers. Incorrect path MTU can cause fragmentation, drops or silent application timeouts.

Are GPU-passthrough VMs suitable for dynamic placement?

They are typically hardware-bound and not freely movable. Placement policy must account for that constraint.

Top