toby
|
ea89e74311
|
removing also test echo output
|
2018-10-19 21:44:46 +02:00 |
|
toby
|
d81aa58f7c
|
doh, actually removing the test code
|
2018-10-19 21:16:16 +02:00 |
|
toby
|
d446f995c8
|
adding edge-support branch to the drone pipeline
|
2018-10-19 20:45:19 +02:00 |
|
toby
|
ea70e243fe
|
more work on edge.... adding support for dynamic ipsec subnets and some more minor patches
|
2018-10-19 19:57:07 +02:00 |
|
toby
|
587bba4290
|
more work on edge / dynamic frr config... .making progress but still ways to go,... just taking a backup...
|
2018-10-19 17:03:43 +02:00 |
|
toby
|
7e1d7993fe
|
more work on edge / dynamic frr config... .making progress but still ways to go,... just taking a backup...
|
2018-10-19 16:56:11 +02:00 |
|
toby
|
cfdc1cd3a9
|
more work ... .still ways to go,... just taking a backup...
|
2018-10-18 22:12:43 +02:00 |
|
toby
|
0e9142c15e
|
first major commit for edge boxes support, not nearly done yet
|
2018-10-16 22:44:57 +02:00 |
|
toby
|
fc2e803533
|
adding a function to build only on the master branch. this avoids releasing packages to the repo before they are at least somewhat ready
|
2018-10-15 18:04:41 +02:00 |
|
toby
|
d30e523aed
|
disabling strongswan service by default. I turn it back on in ansible when certs are in place
|
2018-10-10 18:59:23 +02:00 |
|
toby
|
db5f5107fa
|
nicer output formatting
|
2018-10-09 18:46:35 +00:00 |
|
toby
|
e69f60957c
|
.... me being anal...
|
2018-10-09 18:09:38 +00:00 |
|
toby
|
347291d1a9
|
re-factor of interface config compile process
|
2018-10-09 18:06:28 +00:00 |
|
toby
|
4a89aa2c93
|
re-arranging before interface config refactor
|
2018-10-09 16:25:45 +00:00 |
|
toby
|
1f58cd3918
|
cleaning up leading space vs tab bs
|
2018-10-09 16:23:52 +00:00 |
|
toby
|
4f7f177cc6
|
fixing bug in regex of qemu-ifup-public public IP matching
|
2018-10-08 18:22:22 +02:00 |
|
toby
|
1b891db635
|
renaming WIT customers prefix-list to be more consistent, in preparation for edge support
|
2018-10-08 18:20:48 +02:00 |
|
toby
|
460ee34f03
|
adding support for ibgp interfaces and feth/up/ibgp support for up to 4 nics
|
2018-10-08 11:33:18 +02:00 |
|
toby
|
a343ade9c4
|
adding new firewall rule for stackapi
|
2018-10-05 22:27:10 +00:00 |
|
toby
|
928142ce70
|
updating the qemu-ifup scripts to reflect the new versions usling local files
|
2018-10-05 18:29:12 +00:00 |
|
toby
|
bc97208b34
|
typo in ipv6 prefix list for new customer blocks
|
2018-10-04 20:07:50 +02:00 |
|
toby
|
836822aebe
|
minor but critical typo in udev rule logic
|
2018-10-04 19:21:55 +02:00 |
|
toby
|
23c5b533c1
|
adding more IPv6 customer blocks for paul for the new v2 stack in usw2
|
2018-10-04 18:22:45 +02:00 |
|
toby
|
22edbf98f3
|
adding mac udev rules through DNS lookup configs
|
2018-10-04 18:12:55 +02:00 |
|
toby
|
b5860daf1d
|
typo in firewall rule
|
2018-10-01 18:25:50 +02:00 |
|
toby
|
7a948a6fbf
|
adding ipv6 ssh support from bastion (in theory we should actually only need that, but keep ipv4 for now ... just in case)
|
2018-10-01 15:04:23 +02:00 |
|
toby
|
1cff4bac8e
|
keeping the loopback ip as main tld of the host for simplicity of own lookup
|
2018-10-01 14:59:33 +02:00 |
|
toby
|
45a70bc9b6
|
build trigger
|
2018-10-01 10:57:10 +02:00 |
|
toby
|
1c50cecdb5
|
adding direct ssh access on default for bastion, and migrating to admin domain instead of 3 different zones
|
2018-10-01 10:39:17 +02:00 |
|
toby
|
b18d2c03c8
|
adding mirrors.wit.com to the firewall
|
2018-09-26 23:47:01 +02:00 |
|
toby
|
4e47aa17e7
|
build trigger
|
2018-09-26 09:04:42 +02:00 |
|
toby
|
d87f7c1720
|
configuring etc/network/interfaces from postinst instead of installing a static file
|
2018-09-25 23:24:42 +02:00 |
|
toby
|
a7588ab6c7
|
build trigger
|
2018-09-25 16:08:14 +02:00 |
|
toby
|
7f51717f21
|
adding strongswan-pki to dependency list
|
2018-09-23 22:07:50 +02:00 |
Adam Frank
|
6a01e4988b
|
adding local ceph traffic rules
|
2018-09-22 04:57:07 +00:00 |
|
toby
|
8851b3a67e
|
build trigger
|
2018-09-21 07:33:24 +00:00 |
|
toby
|
95b84e0b25
|
undoing alfonso before ;)
|
2018-09-20 19:48:59 +02:00 |
aseguro
|
0e1b2dcdba
|
Adding smartmontools
|
2018-09-20 16:32:27 +00:00 |
|
aseguro
|
2084193d0c
|
Adding sas3ircu pciutils
|
2018-09-20 16:28:38 +00:00 |
|
toby
|
c8195a9cf8
|
adding first estimated rules for ceph
|
2018-09-20 16:40:25 +02:00 |
|
toby
|
37c69ab507
|
adding ipv6 tunnel to strongswan and matching firewall rules
|
2018-09-17 21:28:02 +02:00 |
|
toby
|
05cb6ef35f
|
quick fix for ifup since introduction of IPv6 loopback IPs
|
2018-09-13 23:51:03 +02:00 |
|
toby
|
002d2e0221
|
fixing firewall scirpt and rolling back to hardcoded IP till I get the systemd unit file
|
2018-09-13 23:41:28 +02:00 |
|
toby
|
2e95eb7bad
|
orginizing the firewall a little bit, no changes in theory
|
2018-09-13 12:08:40 +02:00 |
|
toby
|
8bdbba3016
|
orginizing the firewall a little bit, no changes in theory
|
2018-09-13 01:17:40 +02:00 |
|
toby
|
4a69025703
|
removing legacy dhcp stuff and starting to rely on DNS for loopback v4/v6 and asn
|
2018-09-12 20:01:52 +02:00 |
|
toby
|
4a24a5a513
|
switching back mgmt1 to ipv6 auto/slaac since ipmi is that way too regardless and finally found jinja2 filter
|
2018-09-12 12:27:37 +02:00 |
|
toby
|
dc6a02d0d4
|
fixing ipv6 mgmt firewall rules (again) and setting mgmt1 interface to be dhcp as well (not just auto)
|
2018-09-10 21:03:57 +02:00 |
|
toby
|
4d3026d7c4
|
fixing a damn typo...
|
2018-09-10 18:21:04 +02:00 |
|
toby
|
7d30951603
|
fixing DHCP6 offer packets on firewall to come through
|
2018-09-09 23:37:24 +02:00 |