Salt-Orchestrated OpenSource based Software-Defined-Freifunk-Infrastructre-Network configuration
Maximilian Wilhelm
defff3a255
icinga2: Remove old ldap_replication check
|
3 kuukautta sitten | |
|---|---|---|
| Documentation | 1 vuosi sitten | |
| _modules | 5 kuukautta sitten | |
| anycast-healthchecker | 1 vuosi sitten | |
| apt | 4 kuukautta sitten | |
| apu2 | 4 vuotta sitten | |
| bash | 5 vuotta sitten | |
| batman | 5 kuukautta sitten | |
| bird | 9 kuukautta sitten | |
| build | 1 vuosi sitten | |
| burp | 3 vuotta sitten | |
| certs | 1 vuosi sitten | |
| dhcp-client | 5 kuukautta sitten | |
| dhcp-server | 1 vuosi sitten | |
| dns-server | 9 kuukautta sitten | |
| docker | 5 vuotta sitten | |
| elasticsearch | 3 vuotta sitten | |
| fastd | 2 vuotta sitten | |
| ffinfo | 1 vuosi sitten | |
| firewall | 3 vuotta sitten | |
| firmware | 1 vuosi sitten | |
| gogs | 2 vuotta sitten | |
| grafana | 1 vuosi sitten | |
| graylog | 1 vuosi sitten | |
| icinga2 | 3 kuukautta sitten | |
| icingaweb2 | 1 vuosi sitten | |
| influxdb | 1 vuosi sitten | |
| install-server | 5 kuukautta sitten | |
| kernel | 3 vuotta sitten | |
| kvm | 1 vuosi sitten | |
| locales | 4 kuukautta sitten | |
| mongodb | 1 vuosi sitten | |
| mosh | 8 vuotta sitten | |
| motd | 7 vuotta sitten | |
| needrestart | 3 vuotta sitten | |
| network | 1 vuosi sitten | |
| nftables | 1 vuosi sitten | |
| nginx | 1 vuosi sitten | |
| ntp | 8 vuotta sitten | |
| openvpn | 2 vuotta sitten | |
| postfix | 4 kuukautta sitten | |
| pppoe | 2 vuotta sitten | |
| prometheus-exporters | 1 vuosi sitten | |
| prometheus-server | 3 kuukautta sitten | |
| respondd | 3 vuotta sitten | |
| rsyslog | 2 vuotta sitten | |
| salt-minion | 3 vuotta sitten | |
| screen | 8 vuotta sitten | |
| slapd | 4 vuotta sitten | |
| snmpd | 11 kuukautta sitten | |
| ssh | 4 kuukautta sitten | |
| sudo | 4 kuukautta sitten | |
| sury | 1 vuosi sitten | |
| sysctl | 4 kuukautta sitten | |
| systemd | 2 vuotta sitten | |
| timezone | 5 vuotta sitten | |
| unattended-upgrades | 6 kuukautta sitten | |
| users | 1 vuosi sitten | |
| vim | 4 vuotta sitten | |
| wireguard | 2 vuotta sitten | |
| yanic | 4 kuukautta sitten | |
| .gitignore | 1 vuosi sitten | |
| README.md | 1 vuosi sitten | |
| top.sls | 9 kuukautta sitten | |
| utils.sls | 3 vuotta sitten |
README.md
Freifunk Hochstift infrastructure - SaltStack configuration
This repository contains the Salt environment (states + modules) used to configure the infrastructure of the Freifunk Hochstift community network.
It uses the NetBox Abstraction and Caching Layer (NACL) as its interface to communicate with NetBox, which holds all node specific configuration. This includes the node name, role(s), interfaces, IP addresses, tags, config contexts, etc.
Principles
This whole code base follows the principles of Holistic (network) automation, which means that as much configuration bits are derived from properties of nodes or its relationship(s) to other nodes. This includes but is not limited to, OSPF adjacencies, internal BGP sessions, B.A.T.M.A.N. adv. configuration, Nftables rules, etc.
Most of these bits live inside the Python modules which are included in this repository (see the _modules/ directory), which contains modules for authentication, netfilter, and networking related configuration.
The ffho_net modules currently is the heart of our SDN logic, with more recent pieces (e.g. iBGP mesh calculation) living inside NACL.
Eventually most logic should move over to NACL or another daemon which takes over the SDN role, so that Salt is only used to apply configuration based on a generic device configuration.
Further Reading
Our CTO, @BarbarossaTM, has started a blog series about our infrastructure, its architecture and evolution and also blogs about NetBox related things, which may or may not be related to this code base - it mostly is though :-)