ansible-ffibk/roles/network-routing
Tobias Hachmer e4e8c0998f
Introduce p2p vpn link between all ffmwu servers via WireGuard for routing purpose.
* add jinja2 extension 'jinja2.ext.do' to ansible.cfg
 * add host kichererbse.freifunk-mwu.de
 * add new server_type 'mesh-service' and new host group 'ffmwu-mesh-services'
 * use new loopback and anycast networks
 * add role wireguard
 * add role wireguard as dependency for roles network-routing + service-bird
 * add playbook 'mesh-services'
2019-03-19 15:23:12 +01:00
..
handlers Handlers: move all handlers into their roles, again 2018-03-01 06:34:55 +01:00
meta Introduce p2p vpn link between all ffmwu servers via WireGuard for routing purpose. 2019-03-19 15:23:12 +01:00
tasks Introduce p2p vpn link between all ffmwu servers via WireGuard for routing purpose. 2019-03-19 15:23:12 +01:00
templates Introduce p2p vpn link between all ffmwu servers via WireGuard for routing purpose. 2019-03-19 15:23:12 +01:00
vars split out gateway specific stuff to use roles for generic meshing servers 2018-09-18 12:48:05 +02:00
README.md Roles: improve multidomain support 2019-03-02 18:12:56 +01:00

Ansible role network-routing

Diese Ansible role konfiguriert System Einstellung bzgl. IP Routing.

  • konfiguriert statische Routen (systemd Unit)
    • Mesh Routen für die Routing Tabelle mwu
    • Blackhole Routes für die Routing Tabellen internet + main
  • konfiguriert IP rules (systemd Unit)
  • konfiguriert sysctl Parameter

Benötigte Variablen

  • Dictionary meshes
meshes:
  - id: xx
...
    site_name:
    ipv4_network:
    ipv6_ula:
    ipv6_public:
  • Listen sysctl_settings_routing_basic und sysctl_settings_routing_gateway (Rollen-Variablen)
sysctl_settings_routing_(basic|gateway):
  - name:       # sysctl-Parameter
    value:      # zu setzender Wert
...
  • Host Variable ffrl_public_ipv4_nat # Format ip-adresse/prefix

  • Host Dictionary ffrl_exit_server

  • Host Variable magic

  • Host Variable server_type