toby
|
3f2238a090
|
adding swanctl draft config. not yet used but wanna eventually switch to it
|
2018-10-28 20:45:20 +01:00 |
toby
|
056ca4c6ea
|
fixing bug in udev rule writing for mgmt/gw interfaces
|
2018-10-26 20:45:18 +02:00 |
toby
|
1dc2ca3525
|
fixing bug in udev rule writing for mgmt/gw interfaces
|
2018-10-26 20:24:47 +02:00 |
toby
|
87ee7e115e
|
first draft for bastion support, needs to be tested
|
2018-10-26 19:50:55 +02:00 |
toby
|
31abf06342
|
setting leftsubnet to only be the local loopback instead of a wide range. this will avoid blackholing traffic for edges and potentially other nodes
|
2018-10-23 23:28:29 +02:00 |
toby
|
82146158cd
|
allowing the gre if local asn to be dynamically assigned as well
|
2018-10-23 16:59:12 +02:00 |
toby
|
0eceabfe1d
|
implementing some ad-hoc patches I did yesterday to get it going
|
2018-10-20 17:51:53 +02:00 |
toby
|
3124cda0f2
|
up1 should not run dad attempts
|
2018-10-19 23:37:46 +02:00 |
toby
|
f2777bdbee
|
adding broadcom nic firmware as dependency
|
2018-10-19 23:18:44 +02:00 |
toby
|
1003c71e11
|
have ibgp interface also added to the neighbors obviously...
|
2018-10-19 23:08:31 +02:00 |
toby
|
aa0bef898b
|
adding ibgp interface to frrconfig and fixing syntax in up1-interfaces config
|
2018-10-19 23:01:19 +02:00 |
toby
|
ea89e74311
|
removing also test echo output
|
2018-10-19 21:44:46 +02:00 |
toby
|
d81aa58f7c
|
doh, actually removing the test code
|
2018-10-19 21:16:16 +02:00 |
toby
|
ea70e243fe
|
more work on edge.... adding support for dynamic ipsec subnets and some more minor patches
|
2018-10-19 19:57:07 +02:00 |
toby
|
587bba4290
|
more work on edge / dynamic frr config... .making progress but still ways to go,... just taking a backup...
|
2018-10-19 17:03:43 +02:00 |
toby
|
7e1d7993fe
|
more work on edge / dynamic frr config... .making progress but still ways to go,... just taking a backup...
|
2018-10-19 16:56:11 +02:00 |
toby
|
cfdc1cd3a9
|
more work ... .still ways to go,... just taking a backup...
|
2018-10-18 22:12:43 +02:00 |
toby
|
0e9142c15e
|
first major commit for edge boxes support, not nearly done yet
|
2018-10-16 22:44:57 +02:00 |
toby
|
d30e523aed
|
disabling strongswan service by default. I turn it back on in ansible when certs are in place
|
2018-10-10 18:59:23 +02:00 |
toby
|
db5f5107fa
|
nicer output formatting
|
2018-10-09 18:46:35 +00:00 |
toby
|
e69f60957c
|
.... me being anal...
|
2018-10-09 18:09:38 +00:00 |
toby
|
347291d1a9
|
re-factor of interface config compile process
|
2018-10-09 18:06:28 +00:00 |
toby
|
4a89aa2c93
|
re-arranging before interface config refactor
|
2018-10-09 16:25:45 +00:00 |
toby
|
1f58cd3918
|
cleaning up leading space vs tab bs
|
2018-10-09 16:23:52 +00:00 |
toby
|
1b891db635
|
renaming WIT customers prefix-list to be more consistent, in preparation for edge support
|
2018-10-08 18:20:48 +02:00 |
toby
|
460ee34f03
|
adding support for ibgp interfaces and feth/up/ibgp support for up to 4 nics
|
2018-10-08 11:33:18 +02:00 |
toby
|
836822aebe
|
minor but critical typo in udev rule logic
|
2018-10-04 19:21:55 +02:00 |
toby
|
22edbf98f3
|
adding mac udev rules through DNS lookup configs
|
2018-10-04 18:12:55 +02:00 |
toby
|
1cff4bac8e
|
keeping the loopback ip as main tld of the host for simplicity of own lookup
|
2018-10-01 14:59:33 +02:00 |
toby
|
1c50cecdb5
|
adding direct ssh access on default for bastion, and migrating to admin domain instead of 3 different zones
|
2018-10-01 10:39:17 +02:00 |
toby
|
d87f7c1720
|
configuring etc/network/interfaces from postinst instead of installing a static file
|
2018-09-25 23:24:42 +02:00 |
toby
|
7f51717f21
|
adding strongswan-pki to dependency list
|
2018-09-23 22:07:50 +02:00 |
toby
|
37c69ab507
|
adding ipv6 tunnel to strongswan and matching firewall rules
|
2018-09-17 21:28:02 +02:00 |
toby
|
4a69025703
|
removing legacy dhcp stuff and starting to rely on DNS for loopback v4/v6 and asn
|
2018-09-12 20:01:52 +02:00 |
toby
|
4a24a5a513
|
switching back mgmt1 to ipv6 auto/slaac since ipmi is that way too regardless and finally found jinja2 filter
|
2018-09-12 12:27:37 +02:00 |
toby
|
dc6a02d0d4
|
fixing ipv6 mgmt firewall rules (again) and setting mgmt1 interface to be dhcp as well (not just auto)
|
2018-09-10 21:03:57 +02:00 |
toby
|
4d3026d7c4
|
fixing a damn typo...
|
2018-09-10 18:21:04 +02:00 |
toby
|
028e2d455d
|
fixing bug in IPv6 LOOPBACK, pulling that from DNS as well, ASN is still generated for now
|
2018-09-09 23:11:54 +02:00 |
toby
|
769ef9695f
|
fixing the preinst script to rely on DNS as well
|
2018-09-09 13:32:32 +02:00 |
toby
|
8a53109d81
|
fixing typo ...
|
2018-09-09 13:30:43 +02:00 |
toby
|
37125104c3
|
pulling loopback IP from DNS instead of relaying on dhcp and configfile, moving net-interfaces to each own files in interfaces.d, cleaning up the postinst scritp a bit for easier read
|
2018-09-09 12:58:45 +02:00 |
toby
|
2f1a2d497a
|
removing qemu-system-common dependency again to test if dpkg-displace is all working...
|
2018-08-25 12:25:54 +02:00 |
toby
|
75dadb6d92
|
moving to automatic changelog generation and trying to fix collision with qemu-system-common
|
2018-08-25 00:20:56 +02:00 |
toby
|
4d967cc329
|
displacing default qemu if scripts to allow qemu install
|
2018-08-24 23:25:41 +02:00 |
toby
|
52658cebe2
|
adding some more verbose output to drone for testing
|
2018-08-24 20:47:13 +02:00 |
toby
|
e1d13857b2
|
adding qemu deplendencies just to not break stuff later when installing it
|
2018-08-24 20:20:50 +02:00 |
root
|
1bacfa20dc
|
upping the version so it gets pushed to the repo
|
2018-08-19 08:35:20 +00:00 |
root
|
f2507c74d0
|
drone ... starting over ...
|
2018-08-16 21:37:27 +00:00 |
root
|
9e95ef6478
|
removing ipsec.secrets from diversion since it breaks apparmor permissions and strongswan
|
2018-08-14 10:04:59 +00:00 |
root
|
f6303f817b
|
adding support for frr 5.0
|
2018-08-12 16:34:19 +00:00 |
root
|
8508708aaf
|
re-enabling frr dependencies and upping version for push to repo
|
2018-08-09 13:32:24 +00:00 |
root
|
fbb3ac8d6f
|
minor loopback validy check fix
|
2018-08-09 12:49:26 +00:00 |
root
|
3592ea524b
|
cleanup...
|
2018-08-09 12:42:42 +00:00 |
root
|
13fbc9d572
|
I may come close to the full support finally
|
2018-08-09 10:18:19 +00:00 |
root
|
24e5d81bff
|
renaming dhcp option loopback to tier-id
|
2018-08-08 22:38:14 +00:00 |
toby
|
933901f933
|
rename package to wit-network-config
|
2018-08-08 23:05:05 +02:00 |
root
|
e8a00a6adf
|
adding first steps for dhcp-loopback support and vcs info in control
|
2018-08-08 20:59:37 +00:00 |
root
|
b8368a446f
|
just a coupe more comments and adding vteps to auto-detect
|
2018-08-06 18:45:35 +00:00 |
root
|
35e370d4d7
|
addign dhcpcd5 conflict dependency and fixing rc.local to exit 0
|
2018-08-02 21:54:14 +00:00 |
root
|
248bdb7f80
|
refacotring to some extend now that we switched to dhcpcd and turned off networkd entirely.
|
2018-08-02 21:35:37 +00:00 |
root
|
5280d685c6
|
if we're not dealing with a datanode or hypervisor write the TIER_ID down into the environment so it's available next time, also cleanup interfaces and do not restart strongswan just like we don't restart frr to avoid service interruption after an upgrade
|
2018-08-02 15:45:52 +00:00 |
root
|
653d175c30
|
package rename to -config
|
2018-07-31 17:31:30 +00:00 |
root
|
1bc3a07b9f
|
missing dhcp-client, and seems like I finally got the networkd/lldp issue fixed
|
2018-07-30 21:03:35 +00:00 |
root
|
a88beae0e2
|
cleanup ...
|
2018-07-28 20:52:38 +00:00 |
root
|
27ece3ddea
|
getting very very close
|
2018-07-28 18:47:08 +00:00 |
root
|
14c4cd626b
|
final tweaks
|
2018-07-27 20:51:10 +00:00 |
root
|
906bcb2a7c
|
adding ipsec config as well
|
2018-07-27 20:34:21 +00:00 |
root
|
ce140aaa2f
|
almost working ... files are installed correctly, variables not replacing correctly yet
|
2018-07-27 18:57:47 +00:00 |
root
|
214ea903fc
|
getting close.... only frr.conf is not behaving
|
2018-07-27 18:28:18 +00:00 |
root
|
c467b30914
|
building and major patches still
|
2018-07-27 10:39:47 +00:00 |
root
|
a65021ece5
|
minor bugs
|
2018-07-26 10:17:17 +00:00 |
root
|
bb377472b0
|
first commit
|
2018-07-26 08:57:41 +00:00 |