sunet-cdn/cdn-ops
2
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Manage bird.conf on l4lb machines

Browse source 
Currently just add basic template
This commit is contained in:
Patrik Lundin 2024-10-28 13:16:51 +01:00
parent fb956e4198
commit af96f5e985
Signed by: patlu
GPG key ID: A0A812BA2249F294
2 changed files with 117 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
global/overlay/etc/puppet/modules/cdn/manifests/l4lb.pp
View file

@ -79,4 +79,18 @@ class cdn::l4lb(
content => template('cdn/l4lb/bird-override.conf.erb'),
notify => [Class['sunet::systemd_reload']]
}
file { '/etc/bird/bird.conf':
ensure => file,
owner => 'bird',
group => 'bird',
mode => '0640',
content => template('cdn/l4lb/bird.conf.erb'),
notify => Service['bird'],
}
service { 'bird':
ensure => 'running',
enable => true,
}
}

103
global/overlay/etc/puppet/modules/cdn/templates/l4lb/bird.conf.erb Normal file
View file

@ -0,0 +1,103 @@
# Configure logging
log syslog all;
# Set router ID. It is a unique identification of your router, usually one of
# IPv4 addresses of the router. It is recommended to configure it explicitly.
router id <%= @facts['networking']['interfaces']['default']['ip'] %>;
# The Device protocol is not a real routing protocol. It does not generate any
# routes and it only serves as a module for getting information about network
# interfaces from the kernel. It is necessary in almost any configuration.
protocol device {
}
# The direct protocol is not a real routing protocol. It automatically generates
# direct routes to all network interfaces. Can exist in as many instances as you
# wish if you want to populate multiple routing tables with direct routes.
protocol direct {
ipv4;
ipv6;
interface "dummy0";
}
# The Kernel protocol is not a real routing protocol. Instead of communicating
# with other routers in the network, it performs synchronization of BIRD
# routing tables with the OS kernel. One instance per table.
protocol kernel {
ipv4 {
import none;
export filter { if source = RTS_DEVICE then { reject; } accept; };
};
# Create ECMP routes in kernel table from multiple paths
merge paths;
}
protocol kernel {
ipv6 {
import none;
export filter { if source = RTS_DEVICE then { reject; } accept; };
};
# Create ECMP routes in kernel table from multiple paths
merge paths;
}
protocol bgp tug_r11_v4 {
description "tug-r11-v4";
local 130.242.64.233 as 65443;
neighbor 130.242.64.232 as 1653;
hold time 90;
ipv4 {
import all;
export filter {
if net ~ [ 188.240.152.0/24{32,32} ] then
accept; else reject;
};
};
}
protocol bgp tug_r11_v6 {
description "tug-r12-v6";
local 2001:6b0:2006:74::1 as 65443;
neighbor 2001:6b0:2006:74:: as 1653;
hold time 90;
ipv6 {
import all;
export filter {
if net ~ [ 2001:6b0:2100::/48{128,128} ] then
accept; else reject;
};
};
}
protocol bgp tug_r12_v4 {
description "tug-r12-v4";
local 130.242.64.235 as 65443;
neighbor 130.242.64.234 as 1653;
hold time 90;
ipv4 {
import all;
export filter {
if net ~ [ 188.240.152.0/24{32,32} ] then
accept; else reject;
};
};
}
protocol bgp tug_r12_v6 {
description "tug-r12-v6";
local 2001:6b0:2006:75::1 as 65443;
neighbor 2001:6b0:2006:75:: as 1653;
hold time 90;
ipv6 {
import all;
export filter {
if net ~ [ 2001:6b0:2100::/48{128,128} ] then
accept; else reject;
};
};
}