Hi all,

I'm setting up a new 3-node PVE 8.x cluster and I'm going back and forth on the
networking design. Hardware is generic 2x10GbE per node, LACP bond to a pair of
stacked switches.

I need to host VMs in roughly 12 different VLANs (mix of prod, dev, DMZ, mgmt).

Two options I'm evaluating:

1) Single VLAN-aware bridge (vmbr0) on top of bond0, then set the VLAN tag
directly on each VM's NIC in the GUI.

2) Traditional setup: bond0 -> bond0.10, bond0.20, ... -> one bridge per VLAN
(vmbr10, vmbr20, ...).

Option 1 is obviously cleaner and scales better, but I've read scattered reports
of issues with multicast / IGMP snooping on VLAN-aware bridges, and some people
still recommend option 2 for "production".

Is option 2 still relevant in 2026 with PVE 8.x, or is the VLAN-aware bridge now
the de-facto standard? Any gotcha I should know before committing?

Thanks