Salt-Orchestrated OpenSource based Software-Defined-Freifunk-Infrastructre-Network configuration

Maximilian Wilhelm 9f86fe6eb8 bird: Don't generate potential down BGP peers in template пре 1 месец
Documentation 80c977116f Doc: Add monitoring rule configuration examples пре 1 година
_modules 8620f9d1f5 SDN: Assume IPv6 LLA VTEPs if no IPs configured on underlay пре 7 месеци
anycast-healthchecker 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
apt 69f9d4be0f apt: Salt sources.list and GPG key for Bookworm пре 5 месеци
apu2 0ae03f896f apu2: Document how to force firmware update. пре 4 година
bash 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
batman 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
bird 9f86fe6eb8 bird: Don't generate potential down BGP peers in template пре 1 месец
build 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
burp 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
certs 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
dhcp-client 79e07f458c Add dhcp-client state, with VRF support пре 6 месеци
dhcp-server 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
dns-server 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
docker 4cf47cbc5f Add docker state. пре 5 година
elasticsearch 5b3cbfb6c3 Added elasticsearch config пре 3 година
fastd 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
ffinfo 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
firewall a77faefab6 firewall: Add files to load on boot-up пре 3 година
firmware 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
gogs 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
grafana 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
graylog 172990e9c3 graylog: Use mongodb with authentication пре 1 година
icinga2 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
icingaweb2 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
influxdb 1ea0d959e7 influxdb: Switch to new repo key пре 1 година
install-server a021074e44 install-server: Add preseed for Debian Bookworm пре 2 месеци
kernel 5ee6a1bd4e kernel: Install backports Kernel for Buster for B.A.T.M.A.N. iface penalty support пре 3 година
kvm 9c7c0bd8b1 KVM: Remove need for ifupdown* to configure VM interfaces пре 1 година
locales 54cdaf4438 locales: Add new config file for Debian Bookworm пре 5 месеци
mongodb 29b4318138 mongodb: Enable authorization by default пре 1 година
mosh d243476e23 First bunch of ffho salt configuration files to be public. пре 8 година
motd 6605a8fd50 add motd state пре 7 година
needrestart d77bad69c3 Install needrestart on all nodes. пре 3 година
network 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
nftables 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
nginx 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
ntp d243476e23 First bunch of ffho salt configuration files to be public. пре 8 година
openvpn 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
postfix 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
pppoe 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
prometheus-exporters 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
prometheus-server 3774498fb5 prometheus: Only scrape active nodes пре 5 месеци
respondd 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
rsyslog 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
salt-minion 10f714bd5f salt-minion: python3-tornado isn't required anymore пре 3 година
screen d243476e23 First bunch of ffho salt configuration files to be public. пре 8 година
slapd ebaf2828e5 Add slapd state to configure LDAP servers. пре 4 година
snmpd 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
ssh 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
sudo 28aaa76adf sudo: Add sudoers file for Debian Bookworm пре 5 месеци
sury 74dbf64e12 Add sury php repository пре 1 година
sysctl 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
systemd 1c6d5423bd systemd: Work around new systemd persistent MAC "feature" пре 2 година
timezone f07fb87dcd Set system timezone to Europe/Berlin. пре 5 година
unattended-upgrades bd9b0bc5ca unattended-upgrades: Add config for Debian Boorkworm пре 2 месеци
users 07d06cc8dc Add users statee to manage users and passwords пре 1 година
vim 40755b33a6 vim: Do not use the Debian default vimrc. Ever. пре 4 година
wireguard 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
yanic 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id пре 1 месец
.gitignore 5d8869e75a Ignore VIM's *.swp files пре 1 година
README.md 26bc096db5 Update README пре 1 година
top.sls 351677e136 Take DHCP out of highstate for now пре 11 месеци
utils.sls 47b4966ae8 Add simple utils state to list utils worth installing пре 3 година

README.md

Freifunk Hochstift infrastructure - SaltStack configuration

This repository contains the Salt environment (states + modules) used to configure the infrastructure of the Freifunk Hochstift community network.

It uses the NetBox Abstraction and Caching Layer (NACL) as its interface to communicate with NetBox, which holds all node specific configuration. This includes the node name, role(s), interfaces, IP addresses, tags, config contexts, etc.

Principles

This whole code base follows the principles of Holistic (network) automation, which means that as much configuration bits are derived from properties of nodes or its relationship(s) to other nodes. This includes but is not limited to, OSPF adjacencies, internal BGP sessions, B.A.T.M.A.N. adv. configuration, Nftables rules, etc.

Most of these bits live inside the Python modules which are included in this repository (see the _modules/ directory), which contains modules for authentication, netfilter, and networking related configuration. The ffho_net modules currently is the heart of our SDN logic, with more recent pieces (e.g. iBGP mesh calculation) living inside NACL. Eventually most logic should move over to NACL or another daemon which takes over the SDN role, so that Salt is only used to apply configuration based on a generic device configuration.

Further Reading

Our CTO, @BarbarossaTM, has started a blog series about our infrastructure, its architecture and evolution and also blogs about NetBox related things, which may or may not be related to this code base - it mostly is though :-)