Salt-Orchestrated OpenSource based Software-Defined-Freifunk-Infrastructre-Network configuration
Maximilian Wilhelm
04a731046d
icinga2: Disable some check_ssl_cert params on Bookworm only
|
2 mēneši atpakaļ | |
|---|---|---|
| Documentation | 1 gadu atpakaļ | |
| _modules | 2 mēneši atpakaļ | |
| anycast-healthchecker | 4 mēneši atpakaļ | |
| apt | 8 mēneši atpakaļ | |
| apu2 | 4 gadi atpakaļ | |
| bash | 4 mēneši atpakaļ | |
| batman | 4 mēneši atpakaļ | |
| bird | 4 mēneši atpakaļ | |
| build | 4 mēneši atpakaļ | |
| burp | 2 mēneši atpakaļ | |
| certs | 4 mēneši atpakaļ | |
| dhcp-client | 2 mēneši atpakaļ | |
| dhcp-server | 4 mēneši atpakaļ | |
| dns-server | 4 mēneši atpakaļ | |
| docker | 5 gadi atpakaļ | |
| elasticsearch | 3 gadi atpakaļ | |
| fastd | 4 mēneši atpakaļ | |
| ffinfo | 4 mēneši atpakaļ | |
| firewall | 3 gadi atpakaļ | |
| firmware | 4 mēneši atpakaļ | |
| gogs | 4 mēneši atpakaļ | |
| grafana | 4 mēneši atpakaļ | |
| graylog | 1 gadu atpakaļ | |
| icinga2 | 2 mēneši atpakaļ | |
| icingaweb2 | 4 mēneši atpakaļ | |
| influxdb | 1 gadu atpakaļ | |
| install-server | 5 mēneši atpakaļ | |
| kernel | 3 gadi atpakaļ | |
| kvm | 1 gadu atpakaļ | |
| locales | 8 mēneši atpakaļ | |
| mongodb | 1 gadu atpakaļ | |
| mosh | 8 gadi atpakaļ | |
| motd | 7 gadi atpakaļ | |
| needrestart | 4 gadi atpakaļ | |
| network | 4 mēneši atpakaļ | |
| nftables | 4 mēneši atpakaļ | |
| nginx | 4 mēneši atpakaļ | |
| ntp | 8 gadi atpakaļ | |
| openvpn | 4 mēneši atpakaļ | |
| postfix | 4 mēneši atpakaļ | |
| pppoe | 4 mēneši atpakaļ | |
| prometheus-exporters | 4 mēneši atpakaļ | |
| prometheus-server | 2 mēneši atpakaļ | |
| respondd | 4 mēneši atpakaļ | |
| rsyslog | 4 mēneši atpakaļ | |
| salt-minion | 3 gadi atpakaļ | |
| screen | 8 gadi atpakaļ | |
| slapd | 4 gadi atpakaļ | |
| snmpd | 4 mēneši atpakaļ | |
| ssh | 4 mēneši atpakaļ | |
| sudo | 8 mēneši atpakaļ | |
| sury | 1 gadu atpakaļ | |
| sysctl | 4 mēneši atpakaļ | |
| systemd | 2 gadi atpakaļ | |
| timezone | 5 gadi atpakaļ | |
| unattended-upgrades | 2 mēneši atpakaļ | |
| users | 1 gadu atpakaļ | |
| vim | 4 gadi atpakaļ | |
| wireguard | 4 mēneši atpakaļ | |
| yanic | 4 mēneši atpakaļ | |
| .gitignore | 1 gadu atpakaļ | |
| README.md | 1 gadu atpakaļ | |
| top.sls | 2 mēneši atpakaļ | |
| utils.sls | 3 gadi atpakaļ |
README.md
Freifunk Hochstift infrastructure - SaltStack configuration
This repository contains the Salt environment (states + modules) used to configure the infrastructure of the Freifunk Hochstift community network.
It uses the NetBox Abstraction and Caching Layer (NACL) as its interface to communicate with NetBox, which holds all node specific configuration. This includes the node name, role(s), interfaces, IP addresses, tags, config contexts, etc.
Principles
This whole code base follows the principles of Holistic (network) automation, which means that as much configuration bits are derived from properties of nodes or its relationship(s) to other nodes. This includes but is not limited to, OSPF adjacencies, internal BGP sessions, B.A.T.M.A.N. adv. configuration, Nftables rules, etc.
Most of these bits live inside the Python modules which are included in this repository (see the _modules/ directory), which contains modules for authentication, netfilter, and networking related configuration.
The ffho_net modules currently is the heart of our SDN logic, with more recent pieces (e.g. iBGP mesh calculation) living inside NACL.
Eventually most logic should move over to NACL or another daemon which takes over the SDN role, so that Salt is only used to apply configuration based on a generic device configuration.
Further Reading
Our CTO, @BarbarossaTM, has started a blog series about our infrastructure, its architecture and evolution and also blogs about NetBox related things, which may or may not be related to this code base - it mostly is though :-)