Salt-Orchestrated OpenSource based Software-Defined-Freifunk-Infrastructre-Network configuration

Maximilian Wilhelm bd9b0bc5ca unattended-upgrades: Add config for Debian Boorkworm 6 месяцев назад
Documentation 80c977116f Doc: Add monitoring rule configuration examples 1 год назад
_modules 8620f9d1f5 SDN: Assume IPv6 LLA VTEPs if no IPs configured on underlay 11 месяцев назад
anycast-healthchecker 2455517ceb Add anycast-healthcecker state 1 год назад
apt 69f9d4be0f apt: Salt sources.list and GPG key for Bookworm 9 месяцев назад
apu2 0ae03f896f apu2: Document how to force firmware update. 4 лет назад
bash 517b3b0d4a bash: Increase history and make sure it's always appended. 5 лет назад
batman 34aa0e91f5 batman: Don't expose any errors from checking DHCP daemon's status 11 месяцев назад
bird 645f9acc52 bird: Add default local config knob values 1 год назад
build 6cb331e575 GIT: Use internal DNS alias for our GIT 1 год назад
burp 0b3ae3b258 burp: Let server listen on IPv6 3 лет назад
certs 42fdb07d21 certs: Allow more flexibal configuration 1 год назад
dhcp-client 79e07f458c Add dhcp-client state, with VRF support 11 месяцев назад
dhcp-server 89247b5720 dhcp-server: Use input from dhcp_server NACL module 6 месяцев назад
dns-server 29b2c1fba9 DNS: Update and activate base-line DNS generator based on NetBox data 1 год назад
docker 4cf47cbc5f Add docker state. 5 лет назад
elasticsearch 5b3cbfb6c3 Added elasticsearch config 3 лет назад
fastd 4e1d44b0f0 fastd: Use SDN to determine B.A.T.M.A.N. adv. iface penalty 2 лет назад
ffinfo ab3833e402 ffinfo: Store main node role (from NetBox) on the system 1 год назад
firewall a77faefab6 firewall: Add files to load on boot-up 3 лет назад
firmware 6cb331e575 GIT: Use internal DNS alias for our GIT 1 год назад
gogs bef28a1d26 gogs: Replace us-ascii with binary key 3 лет назад
grafana a59933b2c1 Grafana: Set up Prometheus front end with some dashboards 1 год назад
graylog 172990e9c3 graylog: Use mongodb with authentication 1 год назад
icinga2 79c2e08b00 icinga2: Only write secrets on icinga server 8 месяцев назад
icingaweb2 dd46e91fbe icingaweb2: The icingaweb2-module-monitoring pkg doesn't seem required 1 год назад
influxdb 1ea0d959e7 influxdb: Switch to new repo key 1 год назад
install-server a021074e44 install-server: Add preseed for Debian Bookworm 6 месяцев назад
kernel 5ee6a1bd4e kernel: Install backports Kernel for Buster for B.A.T.M.A.N. iface penalty support 3 лет назад
kvm 9c7c0bd8b1 KVM: Remove need for ifupdown* to configure VM interfaces 1 год назад
locales 54cdaf4438 locales: Add new config file for Debian Bookworm 9 месяцев назад
mongodb 29b4318138 mongodb: Enable authorization by default 1 год назад
mosh d243476e23 First bunch of ffho salt configuration files to be public. 8 лет назад
motd 6605a8fd50 add motd state 7 лет назад
needrestart d77bad69c3 Install needrestart on all nodes. 4 лет назад
network 5295aa0bd8 Make ifupdown-ng the default suite to configure interfaces 1 год назад
nftables 56639cfd8e nftables: Generate set of iBGP peers 1 год назад
nginx 533917fb8b Update firmware/openwrt redirect path to up-to-date mirror 2 лет назад
ntp d243476e23 First bunch of ffho salt configuration files to be public. 8 лет назад
openvpn df8977fb36 openvpn: Add configuration for OPS VPNs 2 лет назад
postfix aff112a215 postfix: Use Debian Bullseye's config as standard 9 месяцев назад
pppoe 2032bdc052 pppoe: Remove Debian stretch Sonderlocke 2 лет назад
prometheus-exporters c69ac4fd59 Prometheus: Install bird-exporter on routers 1 год назад
prometheus-server 3774498fb5 prometheus: Only scrape active nodes 9 месяцев назад
respondd 16d83640de respondd: Start respondd service after network-online target 3 лет назад
rsyslog 825d0c5915 rsyslog: Rotate slapd logs 3 лет назад
salt-minion 10f714bd5f salt-minion: python3-tornado isn't required anymore 3 лет назад
screen d243476e23 First bunch of ffho salt configuration files to be public. 8 лет назад
slapd ebaf2828e5 Add slapd state to configure LDAP servers. 4 лет назад
snmpd 89781ebb00 snmpd: Don't generate synthetica bandwidth for VLAN and VXLAN interfaces 1 год назад
ssh a6f75e13fc ssh: Add sshd_config for Debian Bookworm 9 месяцев назад
sudo 28aaa76adf sudo: Add sudoers file for Debian Bookworm 9 месяцев назад
sury 74dbf64e12 Add sury php repository 1 год назад
sysctl 51cb518159 sysctl: Use Debian Bullseye's values as default 9 месяцев назад
systemd 1c6d5423bd systemd: Work around new systemd persistent MAC "feature" 3 лет назад
timezone f07fb87dcd Set system timezone to Europe/Berlin. 5 лет назад
unattended-upgrades bd9b0bc5ca unattended-upgrades: Add config for Debian Boorkworm 6 месяцев назад
users 07d06cc8dc Add users statee to manage users and passwords 1 год назад
vim 40755b33a6 vim: Do not use the Debian default vimrc. Ever. 4 лет назад
wireguard 4c2f0c4408 Wireguard: Reflect data structure changes 2 лет назад
yanic 3fa8a70532 yanic: Migrate ff_merge_nodes_json to Python3 9 месяцев назад
.gitignore 5d8869e75a Ignore VIM's *.swp files 1 год назад
README.md 26bc096db5 Update README 1 год назад
top.sls 351677e136 Take DHCP out of highstate for now 1 год назад
utils.sls 47b4966ae8 Add simple utils state to list utils worth installing 3 лет назад

README.md

Freifunk Hochstift infrastructure - SaltStack configuration

This repository contains the Salt environment (states + modules) used to configure the infrastructure of the Freifunk Hochstift community network.

It uses the NetBox Abstraction and Caching Layer (NACL) as its interface to communicate with NetBox, which holds all node specific configuration. This includes the node name, role(s), interfaces, IP addresses, tags, config contexts, etc.

Principles

This whole code base follows the principles of Holistic (network) automation, which means that as much configuration bits are derived from properties of nodes or its relationship(s) to other nodes. This includes but is not limited to, OSPF adjacencies, internal BGP sessions, B.A.T.M.A.N. adv. configuration, Nftables rules, etc.

Most of these bits live inside the Python modules which are included in this repository (see the _modules/ directory), which contains modules for authentication, netfilter, and networking related configuration. The ffho_net modules currently is the heart of our SDN logic, with more recent pieces (e.g. iBGP mesh calculation) living inside NACL. Eventually most logic should move over to NACL or another daemon which takes over the SDN role, so that Salt is only used to apply configuration based on a generic device configuration.

Further Reading

Our CTO, @BarbarossaTM, has started a blog series about our infrastructure, its architecture and evolution and also blogs about NetBox related things, which may or may not be related to this code base - it mostly is though :-)