jcarr
/
wit-network-config
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

just a coupe more comments and adding vteps to auto-detect

This commit is contained in:
root 2018-08-06 18:45:35 +00:00
parent 35e370d4d7
commit b8368a446f
3 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
debian/changelog vendored
View File

@ -1,4 +1,4 @@
wit-hypervisor-config (1.2) unstable; urgency=low
wit-hypervisor-config (1.3) unstable; urgency=low
* Initial release.

1
debian/wit-hypervisor-config.postinst vendored
View File

@ -32,6 +32,7 @@ case "$1" in
export MGMT_MAC=$(ip -br link show dev $(ip -4 -br addr | grep 10.0. | awk '{ print $1 }') | awk '{ print $3 }')
[ ${HOSTNAME:0:4} = vtep ] && export HOSTTYPE=hypervisor
[ ${HOSTNAME:0:1} = h ] && export HOSTTYPE=hypervisor
[ ${HOSTNAME:0:1} = d ] && export HOSTTYPE=datanode

6
files/firewall
View File

@ -18,9 +18,9 @@ case $1 in
iptables -P INPUT ACCEPT
iptables -F INPUT
#unencrypted traffic
iptables -A INPUT -s 10.1.0.0/16 -p esp -j ACCEPT
iptables -A INPUT -s 10.1.0.0/16 -p udp --dport 500 --sport 500 -j ACCEPT
iptables -A INPUT -s 10.1.0.0/16 -p udp --dport 4500 --sport 4500 -j ACCEPT
iptables -A INPUT -s 10.1.0.0/16 -p esp -j ACCEPT # ipsec
iptables -A INPUT -s 10.1.0.0/16 -p udp --dport 500 --sport 500 -j ACCEPT # ipsec
iptables -A INPUT -s 10.1.0.0/16 -p udp --dport 4500 --sport 4500 -j ACCEPT # ipsec
iptables -A INPUT -p icmp -j ACCEPT
#traffic we wanna see from the VPN
iptables -A INPUT -m policy --pol ipsec --dir in -s 10.1.0.0/16 -p udp --dport 4789 -m policy --pol ipsec --dir in -j ACCEPT # vxlan traffic