Salt-Orchestrated OpenSource based Software-Defined-Freifunk-Infrastructre-Network configuration
Maximilian Wilhelm
e63e66a2ec
icinga2: Add check_syncrepl_extended
|
3 maanden geleden | |
|---|---|---|
| Documentation | 1 jaar geleden | |
| _modules | 6 maanden geleden | |
| anycast-healthchecker | 1 jaar geleden | |
| apt | 4 maanden geleden | |
| apu2 | 4 jaren geleden | |
| bash | 5 jaren geleden | |
| batman | 6 maanden geleden | |
| bird | 10 maanden geleden | |
| build | 1 jaar geleden | |
| burp | 3 jaren geleden | |
| certs | 1 jaar geleden | |
| dhcp-client | 5 maanden geleden | |
| dhcp-server | 1 jaar geleden | |
| dns-server | 10 maanden geleden | |
| docker | 5 jaren geleden | |
| elasticsearch | 3 jaren geleden | |
| fastd | 2 jaren geleden | |
| ffinfo | 1 jaar geleden | |
| firewall | 3 jaren geleden | |
| firmware | 1 jaar geleden | |
| gogs | 3 jaren geleden | |
| grafana | 1 jaar geleden | |
| graylog | 1 jaar geleden | |
| icinga2 | 3 maanden geleden | |
| icingaweb2 | 1 jaar geleden | |
| influxdb | 1 jaar geleden | |
| install-server | 6 maanden geleden | |
| kernel | 3 jaren geleden | |
| kvm | 1 jaar geleden | |
| locales | 4 maanden geleden | |
| mongodb | 1 jaar geleden | |
| mosh | 8 jaren geleden | |
| motd | 7 jaren geleden | |
| needrestart | 3 jaren geleden | |
| network | 1 jaar geleden | |
| nftables | 1 jaar geleden | |
| nginx | 1 jaar geleden | |
| ntp | 8 jaren geleden | |
| openvpn | 2 jaren geleden | |
| postfix | 4 maanden geleden | |
| pppoe | 2 jaren geleden | |
| prometheus-exporters | 1 jaar geleden | |
| prometheus-server | 3 maanden geleden | |
| respondd | 3 jaren geleden | |
| rsyslog | 2 jaren geleden | |
| salt-minion | 3 jaren geleden | |
| screen | 8 jaren geleden | |
| slapd | 4 jaren geleden | |
| snmpd | 11 maanden geleden | |
| ssh | 4 maanden geleden | |
| sudo | 4 maanden geleden | |
| sury | 1 jaar geleden | |
| sysctl | 4 maanden geleden | |
| systemd | 2 jaren geleden | |
| timezone | 5 jaren geleden | |
| unattended-upgrades | 6 maanden geleden | |
| users | 1 jaar geleden | |
| vim | 4 jaren geleden | |
| wireguard | 2 jaren geleden | |
| yanic | 4 maanden geleden | |
| .gitignore | 1 jaar geleden | |
| README.md | 1 jaar geleden | |
| top.sls | 10 maanden geleden | |
| utils.sls | 3 jaren geleden |
README.md
Freifunk Hochstift infrastructure - SaltStack configuration
This repository contains the Salt environment (states + modules) used to configure the infrastructure of the Freifunk Hochstift community network.
It uses the NetBox Abstraction and Caching Layer (NACL) as its interface to communicate with NetBox, which holds all node specific configuration. This includes the node name, role(s), interfaces, IP addresses, tags, config contexts, etc.
Principles
This whole code base follows the principles of Holistic (network) automation, which means that as much configuration bits are derived from properties of nodes or its relationship(s) to other nodes. This includes but is not limited to, OSPF adjacencies, internal BGP sessions, B.A.T.M.A.N. adv. configuration, Nftables rules, etc.
Most of these bits live inside the Python modules which are included in this repository (see the _modules/ directory), which contains modules for authentication, netfilter, and networking related configuration.
The ffho_net modules currently is the heart of our SDN logic, with more recent pieces (e.g. iBGP mesh calculation) living inside NACL.
Eventually most logic should move over to NACL or another daemon which takes over the SDN role, so that Salt is only used to apply configuration based on a generic device configuration.
Further Reading
Our CTO, @BarbarossaTM, has started a blog series about our infrastructure, its architecture and evolution and also blogs about NetBox related things, which may or may not be related to this code base - it mostly is though :-)