unkin-agent
47e3bdc8f5
prodnxsr0020 runs FRR/OSPF hand-configured; bring its routing config under puppet without touching interfaces, firewall or dnsmasq. - add roles::infra::network::router (base + frrouting + frr_exporter) - enable ip_forward and disable rp_filter via sysctl::base - add prodnxsr0020 OSPF config (dum0, dum1, bond0.201; src 198.18.21.160) - pin dns, consul and router-id to dum0 instead of the WAN-facing primary IP - listen sshd on 127.0.0.1 and dum0 only, knocking out the common WAN primary IP - keep resolv.conf on the local dnsmasq (127.0.0.1) Reviewed-on: #536 Co-authored-by: unkin-agent <unkin-agent@unkin.net> Co-committed-by: unkin-agent <unkin-agent@unkin.net>
13 lines
318 B
Puppet
13 lines
318 B
Puppet
# roles::infra::network::router
|
|
# an ospf router; frr only, interfaces and firewall are managed outside puppet
|
|
#
|
|
class roles::infra::network::router {
|
|
if $facts['firstrun'] {
|
|
include profiles::defaults
|
|
include profiles::firstrun::init
|
|
}else{
|
|
include profiles::defaults
|
|
include profiles::base
|
|
}
|
|
}
|