Commit graph

13 commits

Author SHA1 Message Date
39e1db9c32
Add basic firewall setup for l4lb namespace
Also teach sunet-l4lb-namespace to load the nft ruleset if it exists.
While here modify the script so instead of running "once per netns
config file" we merge the interface config from each json file into the
same dict per namespace. Without this we would attempt to load the nft
ruleset twice (once per file that mentioned the namespace) or warn twice
if the file did not exist etc.
2025-03-31 17:19:29 +02:00
db2b4ca409
Update sunet-l4lb-namespace
Make it able to delete addresses that are no longer in the netns config.
Also make it read one netns-base.json for hardware config which is
managed by puppet but also make it look for netns-sunet-cdn-agent.json
which is not created by puppet. This file will be generated by
sunet-cdn-agent and will include the configuration for dummy0.
2025-03-19 12:35:21 +01:00
c4b9bef3c5
Set net.ipv4.vs.sloppy_tcp=1
Needed if taking over packets for a connection that was established via
another node.
2024-10-29 08:29:21 +01:00
c93846d03b
Use @ 2024-10-28 13:35:55 +01:00
c7b74c27fc
Use fact that exists 2024-10-28 13:34:59 +01:00
6a8671fa3e
Add import filters for bgp 2024-10-28 13:26:13 +01:00
7dc787cb68
Less indentation 2024-10-28 13:22:53 +01:00
af96f5e985
Manage bird.conf on l4lb machines
Currently just add basic template
2024-10-28 13:18:59 +01:00
fb956e4198
Add basic dummy0 interface 2024-10-25 15:28:03 +02:00
5d60c2dd02
Move template to correct location 2024-10-25 15:23:49 +02:00
f588078b75
Add namespace management files 2024-10-22 17:06:29 +02:00
dd0493f869
Fix volume declarations
Did not expect to create anonymous volumes, see
https://stackoverflow.com/questions/46166304/docker-compose-volumes-without-colon
for more details. Now the host directories should be mounted. While here
try setting :ro to the paths we are not expecting to modify. The
/lib/modules :ro flag is based on
3cbd8258eb/cilium-lb.yaml (L143-L145)
2024-08-20 12:31:42 +02:00
6057c62f47
Initial commit of running cilium l4lb via compose 2024-08-20 11:25:15 +02:00