Freifunk-Troisdorf/ansible.fftdf.supernode
5
0
Fork 0
Code Issues 1 Pull Requests Releases Wiki Activity

troidorf1 Config Pre-Final

Browse Source
This commit is contained in:
Stefan Hoffmann 2016-05-11 00:08:06 +02:00
parent 1423df56a5
commit 86b853e6e5
3 changed files with 90 additions and 37 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
files/bird-troisdorf1.conf
View File

@ -48,7 +48,7 @@ function is_freifunk() {
} }
filter hostroute { filter hostroute {
if net ~ 185.66.193.105/32 then accept; if net ~ 185.66.193.104/32 then accept;
reject; reject;
}; };
@ -63,22 +63,32 @@ template bgp uplink {
}; };
protocol bgp ffrl_bb_a_ak_ber from uplink { protocol bgp ffrl_bb_a_ak_ber from uplink {
source address 100.64.2.151; source address 100.64.6.13;
neighbor 100.64.2.150 as 201701; neighbor 100.64.6.12 as 201701;
}; };
protocol bgp ffrl_bb_b_ak_ber from uplink { protocol bgp ffrl_bb_b_ak_ber from uplink {
source address 100.64.2.153; source address 100.64.6.19;
neighbor 100.64.2.152 as 201701; neighbor 100.64.6.18 as 201701;
}; };
protocol bgp ffrl_bb_a_ix_dus from uplink { protocol bgp ffrl_bb_a_ix_dus from uplink {
source address 100.64.2.155; source address 100.64.6.17;
neighbor 100.64.2.154 as 201701; neighbor 100.64.6.16 as 201701;
}; };
protocol bgp ffrl_bb_b_ix_dus from uplink { protocol bgp ffrl_bb_b_ix_dus from uplink {
source address 100.64.2.157; source address 100.64.6.23;
neighbor 100.64.2.156 as 201701; neighbor 100.64.6.22 as 201701;
};
protocol bgp ffrl_bb_a_fra3_fra from uplink {
source address 100.64.6.15;
neighbor 100.64.6.14 as 201701;
};
protocol bgp ffrl_bb_b_fra3_fra from uplink {
source address 100.64.6.21;
neighbor 100.64.6.20 as 201701;
}; };

28
files/bird6-troisdorf1.conf
View File

@ -10,8 +10,6 @@
router id 10.188.255.1; router id 10.188.255.1;
protocol direct { protocol direct {
# interface "*"; # Restrict network interfaces it works with
# interface "bat0", "gre-*", "eth*", "lo"; # Restrict network interfaces it works with
interface "bat0", "gre-*", "lo"; # Restrict network interfaces it works with interface "bat0", "gre-*", "lo"; # Restrict network interfaces it works with
} }
@ -60,23 +58,33 @@ template bgp uplink {
protocol bgp ffrl_bb_a_ak_ber from uplink { protocol bgp ffrl_bb_a_ak_ber from uplink {
source address 2a03:2260:0:155::2; source address 2a03:2260:0:306::2;
neighbor 2a03:2260:0:155::1 as 201701; neighbor 2a03:2260:0:306::1 as 201701;
} }
protocol bgp ffrl_bb_b_ak_ber from uplink { protocol bgp ffrl_bb_b_ak_ber from uplink {
source address 2a03:2260:0:156::2; source address 2a03:2260:0:309::2;
neighbor 2a03:2260:0:156::1 as 201701; neighbor 2a03:2260:0:309::1 as 201701;
} }
protocol bgp ffrl_bb_a_ix_dus from uplink { protocol bgp ffrl_bb_a_ix_dus from uplink {
source address 2a03:2260:0:157::2; source address 2a03:2260:0:308::2;
neighbor 2a03:2260:0:157::1 as 201701; neighbor 2a03:2260:0:308::1 as 201701;
} }
protocol bgp ffrl_bb_b_ix_dus from uplink { protocol bgp ffrl_bb_b_ix_dus from uplink {
source address 2a03:2260:0:158::2; source address 2a03:2260:0:30b::2;
neighbor 2a03:2260:0:158::1 as 201701; neighbor 2a03:2260:0:30b::1 as 201701;
}
protocol bgp ffrl_bb_a_fra3_fra from uplink {
source address 2a03:2260:0:307::2;
neighbor 2a03:2260:0:307::1 as 201701;
}
protocol bgp ffrl_bb_b_fra3_fra from uplink {
source address 2a03:2260:0:30a::2;
neighbor 2a03:2260:0:30a::1 as 201701;
} }

71
files/interfaces-troisdorf1
View File

@ -6,10 +6,10 @@ source /etc/network/interfaces.d/*
# The loopback network interface # The loopback network interface
auto lo auto lo
iface lo inet loopback iface lo inet loopback
up ip address add 185.66.193.105/32 dev lo up ip address add 185.66.193.104/32 dev lo
iface lo inet6 loopback iface lo inet6 loopback
up ip address add 2a03:2260:121::105/48 dev lo up ip address add 2a03:2260:121::104/48 dev lo
# The primary network interface # The primary network interface
@ -31,34 +31,34 @@ auto 6to4
# Berlin Router A # Berlin Router A
auto gre-bb-a.ak.ber auto gre-bb-a.ak.ber
iface gre-bb-a.ak.ber inet static iface gre-bb-a.ak.ber inet static
address 100.64.2.151 address 100.64.6.13
netmask 255.255.255.254 netmask 255.255.255.254
pre-up ip tunnel add $IFACE mode gre local 163.172.27.8 remote 185.66.195.0 ttl 255 pre-up ip tunnel add $IFACE mode gre local 163.172.27.8 remote 185.66.195.0 ttl 255
post-up iptables -t nat -A POSTROUTING -o $IFACE -j SNAT --to-source 185.66.193.105 post-up iptables -t nat -A POSTROUTING -o $IFACE -j SNAT --to-source 185.66.193.104
post-up iptables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --set-mss 1312 post-up iptables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --set-mss 1312
post-up ip link set $IFACE mtu 1400 post-up ip link set $IFACE mtu 1400
post-down iptables -t nat -D POSTROUTING -o $IFACE -j SNAT --to-source 185.66.193.105 post-down iptables -t nat -D POSTROUTING -o $IFACE -j SNAT --to-source 185.66.193.104
post-down ip tunnel del $IFACE post-down ip tunnel del $IFACE
iface gre-bb-a.ak.ber inet6 static iface gre-bb-a.ak.ber inet6 static
address 2a03:2260:0:155::2/64 address 2a03:2260:0:306::2/64
netmask 64 netmask 64
post-up ip6tables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --set-mss 1312 post-up ip6tables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --set-mss 1312
# Berlin Router B # Berlin Router B
auto gre-bb-b.ak.ber auto gre-bb-b.ak.ber
iface gre-bb-b.ak.ber inet static iface gre-bb-b.ak.ber inet static
address 100.64.2.153 address 100.64.6.19
netmask 255.255.255.254 netmask 255.255.255.254
pre-up ip tunnel add $IFACE mode gre local 163.172.27.8 remote 185.66.195.1 ttl 255 pre-up ip tunnel add $IFACE mode gre local 163.172.27.8 remote 185.66.195.1 ttl 255
post-up iptables -t nat -A POSTROUTING -o $IFACE -j SNAT --to-source 185.66.193.105 post-up iptables -t nat -A POSTROUTING -o $IFACE -j SNAT --to-source 185.66.193.104
post-up iptables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --set-mss 1312 post-up iptables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --set-mss 1312
post-up ip link set $IFACE mtu 1400 post-up ip link set $IFACE mtu 1400
post-down iptables -t nat -D POSTROUTING -o $IFACE -j SNAT --to-source 185.66.193.105 post-down iptables -t nat -D POSTROUTING -o $IFACE -j SNAT --to-source 185.66.193.104
post-down ip tunnel del $IFACE post-down ip tunnel del $IFACE
iface gre-bb-b.ak.ber inet6 static iface gre-bb-b.ak.ber inet6 static
address 2a03:2260:0:156::2/64 address 2a03:2260:0:309::2/64
netmask 64 netmask 64
post-up ip6tables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --set-mss 1312 post-up ip6tables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --set-mss 1312
@ -66,17 +66,17 @@ iface gre-bb-b.ak.ber inet6 static
# Duesseldorf Router A # Duesseldorf Router A
auto gre-bb-a.ix.dus auto gre-bb-a.ix.dus
iface gre-bb-a.ix.dus inet static iface gre-bb-a.ix.dus inet static
address 100.64.2.155 address 100.64.6.17
netmask 255.255.255.254 netmask 255.255.255.254
pre-up ip tunnel add $IFACE mode gre local 163.172.27.8 remote 185.66.193.0 ttl 255 pre-up ip tunnel add $IFACE mode gre local 163.172.27.8 remote 185.66.193.0 ttl 255
post-up iptables -t nat -A POSTROUTING -o $IFACE -j SNAT --to-source 185.66.193.105 post-up iptables -t nat -A POSTROUTING -o $IFACE -j SNAT --to-source 185.66.193.104
post-up iptables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --set-mss 1312 post-up iptables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --set-mss 1312
post-up ip link set $IFACE mtu 1400 post-up ip link set $IFACE mtu 1400
post-down iptables -t nat -D POSTROUTING -o $IFACE -j SNAT --to-source 185.66.193.105 post-down iptables -t nat -D POSTROUTING -o $IFACE -j SNAT --to-source 185.66.193.104
post-down ip tunnel del $IFACE post-down ip tunnel del $IFACE
iface gre-bb-a.ix.dus inet6 static iface gre-bb-a.ix.dus inet6 static
address 2a03:2260:0:157::2/64 address 2a03:2260:0:308::2/64
netmask 64 netmask 64
post-up ip6tables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --set-mss 1312 post-up ip6tables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --set-mss 1312
@ -84,16 +84,51 @@ iface gre-bb-a.ix.dus inet6 static
# Duesseldorf Router B # Duesseldorf Router B
auto gre-bb-b.ix.dus auto gre-bb-b.ix.dus
iface gre-bb-b.ix.dus inet static iface gre-bb-b.ix.dus inet static
address 100.64.2.157 address 100.64.6.23
netmask 255.255.255.254 netmask 255.255.255.254
pre-up ip tunnel add $IFACE mode gre local 163.172.27.8 remote 185.66.193.1 ttl 255 pre-up ip tunnel add $IFACE mode gre local 163.172.27.8 remote 185.66.193.1 ttl 255
post-up iptables -t nat -A POSTROUTING -o $IFACE -j SNAT --to-source 185.66.193.105 post-up iptables -t nat -A POSTROUTING -o $IFACE -j SNAT --to-source 185.66.193.104
post-up iptables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --set-mss 1312 post-up iptables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --set-mss 1312
post-up ip link set $IFACE mtu 1400 post-up ip link set $IFACE mtu 1400
post-down iptables -t nat -D POSTROUTING -o $IFACE -j SNAT --to-source 185.66.193.105 post-down iptables -t nat -D POSTROUTING -o $IFACE -j SNAT --to-source 185.66.193.104
post-down ip tunnel del $IFACE post-down ip tunnel del $IFACE
iface gre-bb-b.ix.dus inet6 static iface gre-bb-b.ix.dus inet6 static
address 2a03:2260:0:158::2/64 address 2a03:2260:0:30b::2/64
netmask 64
post-up ip6tables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --set-mss 1312
# Frankfurt Router A
auto gre-bb-a.ix.dus
iface gre-bb-a.ix.dus inet static
address 100.64.6.15v
netmask 255.255.255.254
pre-up ip tunnel add $IFACE mode gre local 163.172.27.8 remote 185.66.194.0 ttl 255
post-up iptables -t nat -A POSTROUTING -o $IFACE -j SNAT --to-source 185.66.193.104
post-up iptables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --set-mss 1312
post-up ip link set $IFACE mtu 1400
post-down iptables -t nat -D POSTROUTING -o $IFACE -j SNAT --to-source 185.66.193.104
post-down ip tunnel del $IFACE
iface gre-bb-a.ix.dus inet6 static
address 2a03:2260:0:307::2/64
netmask 64
post-up ip6tables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --set-mss 1312
# Frankfurt Router B
auto gre-bb-b.ix.dus
iface gre-bb-b.ix.dus inet static
address 100.64.6.21
netmask 255.255.255.254
pre-up ip tunnel add $IFACE mode gre local 163.172.27.8 remote 185.66.194.1 ttl 255
post-up iptables -t nat -A POSTROUTING -o $IFACE -j SNAT --to-source 185.66.193.104
post-up iptables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --set-mss 1312
post-up ip link set $IFACE mtu 1400
post-down iptables -t nat -D POSTROUTING -o $IFACE -j SNAT --to-source 185.66.193.104
post-down ip tunnel del $IFACE
iface gre-bb-b.ix.dus inet6 static
address 2a03:2260:0:30a::2/64
netmask 64 netmask 64
post-up ip6tables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --set-mss 1312 post-up ip6tables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --set-mss 1312