首頁 探索 說明
註冊 登入
FreifunkHochstift
/
ffho-salt-public
2
0
複刻 2
Files 問題管理 0 合併請求 0

Salt-Orchestrated OpenSource based Software-Defined-Freifunk-Infrastructre-Network configuration

分支: master
分支列表 標籤列表
ffho-salt-pu...
ZIP TAR.GZ
Maximilian Wilhelm 674c24ed2b wireguard: Send keepalives every 25s 2 天之前
Documentation 80c977116f Doc: Add monitoring rule configuration examples 1 年之前
_modules 1ad46124d0 SDN: Fix fwmark for vrf_oobm_ext 2 天之前
anycast-healthchecker 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id 7 月之前
apt 69f9d4be0f apt: Salt sources.list and GPG key for Bookworm 11 月之前
apu2 0ae03f896f apu2: Document how to force firmware update. 5 年之前
bash 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id 7 月之前
batman 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id 7 月之前
bird 9f86fe6eb8 bird: Don't generate potential down BGP peers in template 7 月之前
build 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id 7 月之前
burp 51a28612c0 burp: client: Only log to burp's own log file 5 月之前
certs 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id 7 月之前
dhcp-client 8645ad5d8a dhcp-client: Only request address/router config 5 月之前
dhcp-server 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id 7 月之前
dns-server 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id 7 月之前
docker 4cf47cbc5f Add docker state. 5 年之前
elasticsearch 5b3cbfb6c3 Added elasticsearch config 4 年之前
fastd 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id 7 月之前
ffinfo 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id 7 月之前
firewall a77faefab6 firewall: Add files to load on boot-up 3 年之前
firmware 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id 7 月之前
gogs 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id 7 月之前
grafana 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id 7 月之前
graylog 172990e9c3 graylog: Use mongodb with authentication 1 年之前
icinga2 04a731046d icinga2: Disable some check_ssl_cert params on Bookworm only 5 月之前
icingaweb2 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id 7 月之前
influxdb 1ea0d959e7 influxdb: Switch to new repo key 1 年之前
install-server a021074e44 install-server: Add preseed for Debian Bookworm 8 月之前
kernel 5ee6a1bd4e kernel: Install backports Kernel for Buster for B.A.T.M.A.N. iface penalty support 3 年之前
kvm 9c7c0bd8b1 KVM: Remove need for ifupdown* to configure VM interfaces 1 年之前
locales 54cdaf4438 locales: Add new config file for Debian Bookworm 11 月之前
mongodb 29b4318138 mongodb: Enable authorization by default 1 年之前
mosh d243476e23 First bunch of ffho salt configuration files to be public. 8 年之前
motd 6605a8fd50 add motd state 7 年之前
needrestart d77bad69c3 Install needrestart on all nodes. 4 年之前
network 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id 7 月之前
nftables 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id 7 月之前
nginx 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id 7 月之前
ntp d243476e23 First bunch of ffho salt configuration files to be public. 8 年之前
openvpn 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id 7 月之前
postfix 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id 7 月之前
pppoe 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id 7 月之前
prometheus-exporters 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id 7 月之前
prometheus-server 0728957ae0 prometheus-server: Scrape database exporters 5 月之前
respondd 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id 7 月之前
rsyslog 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id 7 月之前
salt-minion 10f714bd5f salt-minion: python3-tornado isn't required anymore 3 年之前
screen d243476e23 First bunch of ffho salt configuration files to be public. 8 年之前
slapd ebaf2828e5 Add slapd state to configure LDAP servers. 4 年之前
snmpd 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id 7 月之前
ssh 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id 7 月之前
sudo 28aaa76adf sudo: Add sudoers file for Debian Bookworm 11 月之前
sury 74dbf64e12 Add sury php repository 1 年之前
sysctl 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id 7 月之前
systemd 1c6d5423bd systemd: Work around new systemd persistent MAC "feature" 3 年之前
timezone f07fb87dcd Set system timezone to Europe/Berlin. 5 年之前
unattended-upgrades 678580eb76 unattended-upgrades: Upgrade libc6 and fastd, too 5 月之前
users 07d06cc8dc Add users statee to manage users and passwords 2 年之前
vim 40755b33a6 vim: Do not use the Debian default vimrc. Ever. 4 年之前
wireguard 674c24ed2b wireguard: Send keepalives every 25s 2 天之前
yanic 60a5299b0b Use 'node' pillar instead of 'nodes:' ~ grains.id 7 月之前
.gitignore 5d8869e75a Ignore VIM's *.swp files 1 年之前
README.md 26bc096db5 Update README 1 年之前
top.sls 4f3cb48596 Fix order in top.sls 2 天之前
utils.sls 47b4966ae8 Add simple utils state to list utils worth installing 3 年之前

README.md

Freifunk Hochstift infrastructure - SaltStack configuration

This repository contains the Salt environment (states + modules) used to configure the infrastructure of the Freifunk Hochstift community network.

It uses the NetBox Abstraction and Caching Layer (NACL) as its interface to communicate with NetBox, which holds all node specific configuration. This includes the node name, role(s), interfaces, IP addresses, tags, config contexts, etc.

Principles

This whole code base follows the principles of Holistic (network) automation, which means that as much configuration bits are derived from properties of nodes or its relationship(s) to other nodes. This includes but is not limited to, OSPF adjacencies, internal BGP sessions, B.A.T.M.A.N. adv. configuration, Nftables rules, etc.

Most of these bits live inside the Python modules which are included in this repository (see the _modules/ directory), which contains modules for authentication, netfilter, and networking related configuration. The ffho_net modules currently is the heart of our SDN logic, with more recent pieces (e.g. iBGP mesh calculation) living inside NACL. Eventually most logic should move over to NACL or another daemon which takes over the SDN role, so that Salt is only used to apply configuration based on a generic device configuration.

Further Reading

Our CTO, @BarbarossaTM, has started a blog series about our infrastructure, its architecture and evolution and also blogs about NetBox related things, which may or may not be related to this code base - it mostly is though :-)