The local domain does not work on the local network.

bars

Hello.
There is a server with proxmox, on the server vpska are raised (pfsese, 2 vps linux and 1 vps windows).
Local domain mydom.lan.
Local network 10.10.2.0/24.
On pfsense enabled :

dhcp server.
dns resolver.
openvpn is running.

dns resolver

dhcp server

Pings in the local network by ip address work.
But pings in the local network by domain do not work.
If you ping servers by domain from a pfsense server on the local network, pings work.
Domain ping from Linux server, ping does not work.
Ping in windows works by server name.
Windows ping does not work across the domain.
Windows ping serv1c.mydom.lan not work.
Windows ping serv1c work.

if I connect to the network via vpn, the virtual network 10.10.3.0/24 will appear on my computer.
I try ping on the domain, it works.
I can ping servers on the local network.

Linux vps resolv.conf

cat /etc/resolv.conf 
domain mydom.lan
search mydom.lan
nameserver 10.10.2.2

linux domain zone view.

nslookup serv1c.mydom.lan
Server:         10.10.2.2
Address:        10.10.2.2#53

** server can't find serv1c.mydom.lan: REFUSED

pfsense domain zone view.

nslookup serv1c.mydom.lan
Server:         127.0.0.1
Address:        127.0.0.1#53

Name: serv1c.mydom.lan
Address:         10.10.2.11

Please help me solve the problem.

Patch

@bars
Add a static DNS entry to pfsense for your Proxmox server in addition to the static IP address set in Proxmox. See https://forum.proxmox.com/threads/host-network-access-lost-after-proxmox-upgrade-7-0-to-7-1-router-vm-with-pass-through-nic.100091/#post-435007

Note I’m aware this should not be required however it makes it work in practice for me.

bars

@patch
Not understood.
Where and what to add?

Patch

@bars said in The local domain does not work on the local network.:

Where and what to add?

From the link provided

Where your router is a VM running on a Proxmox hypervisor, so when Proxmox boots there is not route to the Internet, no DHCP server, and no DNS.

In Proxmox 7.0

Set the IP address of Proxmox in Proxmox. Nothing else needs to by done.

In Proxmox 7.1 for me to be able to ping the hypervisor and for the hypervisor to be able to download updates, the work around I have used is

Leave the Hypervisor IP address set to a fixed value in Proxmox. This is normally set during Proxmox installation but can be changed by Proxmox -> Datacentre -> <pve> -> Network -> vmbr0 -> Edit -> IPv4/CIDR.
In pfsense set a static IPv4 address for Proxmox. Login to pfsense -> Services -> DHCP Server -> Select the interface you access Proxmox from -> Scroll to the bottom of the page to "DHCP Static Mappings for this Interface" -> Add -> enter Proxmox IPv4 address and it's mac address.

Step 1 is a normal requirement. Step 2 is a work around for Proxmox 7.1 running the networks router (which means when Proxmox boots there is no DHCP server, DNS, or gateway to the Internet). There are probably other ways of working around this issue, which I would prefer as I don't like programs interacting like this. However I'm using this work around until a better solution is found. Btw I pass through all NIC pfsense uses however when making a pfsense VM without pass through made no difference the this behavior.

Edit: Updated the Proxmox 7.1 work around to make it clearer

bars

@patch
I solved the problem.
The gateway was registered in the LAN interface, removed it, left it only on the external interface and everything worked.

LAN interface -> IPv4 Upstream gateway -> none

Patch

@bars
Well done.
Reading through what your issue was again, my line of thought was way off as it was not just a Proxmox hypervisor network problem.

Btw
If you put a gateway on an interface, pfsense will make it a WAN interface (ie it becomes a Gateway pfsense can use). That is distinct from all other interfaces where pfsense implements a router function and provides a Gateway for pfsense's clients on your network.

bars

@patch
So it is planned that pfsense will become the gateway for the VPS to proxmox.
In the proxmox, in the VPS settings, I initially prescribed dns from pfsense.
Thanks for help!