Page MenuHomeDevCentral

Secure HA tunnelsInfrastructure
ActivePublic

Watchers

  • This project does not have any watchers.
  • View All

Details

Description

GRE tunnel with IPSEC and CARP

Recent Activity

Yesterday

dereckson updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
Sun, Mar 22, 23:47 · Monitoring and reporting, Python, Secure HA tunnels
dereckson added a comment to T2276: Automate CARP VIP MAC reassignment using devd and OVH API.

Ah, that's now what we need, nice for the script!

Sun, Mar 22, 23:43 · Monitoring and reporting, Python, Secure HA tunnels
yousra added a comment to T2276: Automate CARP VIP MAC reassignment using devd and OVH API.

The file /usr/local/etc/devd/carp.conf :

Sun, Mar 22, 21:33 · Monitoring and reporting, Python, Secure HA tunnels
dereckson added a comment to T2276: Automate CARP VIP MAC reassignment using devd and OVH API.

You can directly use variables in the action to pass interface and state with $subsystem and $type

Sun, Mar 22, 21:13 · Monitoring and reporting, Python, Secure HA tunnels
yousra added a comment to T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
notify 0 {
    match "system" "CARP";
    match "subsystem" "[0-9]+@[0-9a-z.]+";
    match "type" "(MASTER|BACKUP)";
    action "/usr/local/scripts/carp-test.sh";
};
Sun, Mar 22, 20:24 · Monitoring and reporting, Python, Secure HA tunnels
dereckson added a project to T1767: Provision /etc/hosts: Secure HA tunnels.
Sun, Mar 22, 18:48 · Secure HA tunnels, Salt, Drake network
dereckson added a comment to T2276: Automate CARP VIP MAC reassignment using devd and OVH API.

For all CARP external documentation, I think I've found the threshold where information is outdated in that man page:

Sun, Mar 22, 17:46 · Monitoring and reporting, Python, Secure HA tunnels
dereckson added a comment to T2276: Automate CARP VIP MAC reassignment using devd and OVH API.

According carp(4) (man carp) examples section, the name has changed.

Sun, Mar 22, 17:43 · Monitoring and reporting, Python, Secure HA tunnels
yousra added a comment to T2276: Automate CARP VIP MAC reassignment using devd and OVH API.

@dereckson I first tried to redefine the devd rule by matching specific IFNET event types such as LINK_UP, LINK_DOWN, UP and DOWN, but none of them were triggered during CARP state changes in my tests.

Sun, Mar 22, 17:11 · Monitoring and reporting, Python, Secure HA tunnels
dereckson added a comment to T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
notify 0 {
    match "system" "IFNET";
    match "subsystem" "vmx1";
    action "logger CARP state change detected";
};
Sun, Mar 22, 16:32 · Monitoring and reporting, Python, Secure HA tunnels
yousra added a comment to T2276: Automate CARP VIP MAC reassignment using devd and OVH API.

A dedicated devd file was placed in /usr/local/etc/devd because this directory is usually used for custom configurations added by administrators, while /etc/devd contains the default system rules from FreeBSD. It makes the setup cleaner, avoids mixing custom logic with system configuration, and makes future maintenance or upgrades easier.

Sun, Mar 22, 15:48 · Monitoring and reporting, Python, Secure HA tunnels
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
Sun, Mar 22, 15:28 · Monitoring and reporting, Python, Secure HA tunnels
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
Sun, Mar 22, 15:26 · Monitoring and reporting, Python, Secure HA tunnels
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
Sun, Mar 22, 15:25 · Monitoring and reporting, Python, Secure HA tunnels
yousra updated the task description for T2276: Automate CARP VIP MAC reassignment using devd and OVH API.
Sun, Mar 22, 15:24 · Monitoring and reporting, Python, Secure HA tunnels

Sat, Mar 21

dereckson moved T2205: Enable CARP high-availability on router-002 and router-003 from Backlog to Servers config on the Salt board.
Sat, Mar 21, 20:35 · Vault, Monitoring and reporting, Salt, Secure HA tunnels
dereckson moved T2274: Configure CARP to send advertisements in unicast mode from Backlog to Servers config on the Salt board.
Sat, Mar 21, 20:34 · Monitoring and reporting, Salt, Secure HA tunnels
yousra moved T2274: Configure CARP to send advertisements in unicast mode from Working on to Done on the Secure HA tunnels board.
Sat, Mar 21, 19:53 · Monitoring and reporting, Salt, Secure HA tunnels
yousra closed T2274: Configure CARP to send advertisements in unicast mode as Resolved.
Sat, Mar 21, 19:53 · Monitoring and reporting, Salt, Secure HA tunnels
yousra moved T2205: Enable CARP high-availability on router-002 and router-003 from Working on to Done on the Secure HA tunnels board.
Sat, Mar 21, 19:52 · Vault, Monitoring and reporting, Salt, Secure HA tunnels
yousra closed T2205: Enable CARP high-availability on router-002 and router-003 as Resolved.
Sat, Mar 21, 19:52 · Vault, Monitoring and reporting, Salt, Secure HA tunnels
dereckson edited P392 roles/router/carp/files/carp-ovh-switch.py.
Sat, Mar 21, 16:07 · Secure HA tunnels
dereckson added a comment to P392 roles/router/carp/files/carp-ovh-switch.py.

Proof of concept to call OVH API from Python to define MAC address to router-002/003.

Sat, Mar 21, 16:06 · Secure HA tunnels
dereckson added a project to P392 roles/router/carp/files/carp-ovh-switch.py: Secure HA tunnels.
Sat, Mar 21, 16:04 · Secure HA tunnels
dereckson lowered the priority of T2277: Check DNS records with reference to router-001 from High to Normal.
Sat, Mar 21, 10:34 · DNS, Secure HA tunnels
dereckson triaged T2277: Check DNS records with reference to router-001 as High priority.
Sat, Mar 21, 10:33 · DNS, Secure HA tunnels
dereckson triaged T2279: Prometheus / IPsec exporter as Normal priority.
Sat, Mar 21, 10:33 · Monitoring and reporting, Secure HA tunnels

Fri, Mar 20

dereckson added a comment to T2276: Automate CARP VIP MAC reassignment using devd and OVH API.

OVH API credentials published to apps/network/carp-hyper-001-switch path,
under application_key, application_secret, consumer_key keys.

Fri, Mar 20, 23:11 · Monitoring and reporting, Python, Secure HA tunnels
dereckson added a revision to T2276: Automate CARP VIP MAC reassignment using devd and OVH API: D4016: Provision Vault policy for routers.
Fri, Mar 20, 22:54 · Monitoring and reporting, Python, Secure HA tunnels
dereckson moved T2201: GRE tunnel creation from Backlog to Working on on the Secure HA tunnels board.
Fri, Mar 20, 22:52 · User-Duranzed, Secure HA tunnels

Thu, Mar 19

dereckson renamed T2279: Prometheus / IPsec exporter from Prometheus / ipsec exporter to Prometheus / IPsec exporter .
Thu, Mar 19, 21:58 · Monitoring and reporting, Secure HA tunnels

Wed, Mar 18

dereckson moved T2279: Prometheus / IPsec exporter from Backlog to Prometheus on the Monitoring and reporting board.
Wed, Mar 18, 18:52 · Monitoring and reporting, Secure HA tunnels
dereckson added a project to T2279: Prometheus / IPsec exporter : Monitoring and reporting.
Wed, Mar 18, 18:52 · Monitoring and reporting, Secure HA tunnels
Duranzed created T2279: Prometheus / IPsec exporter .
Wed, Mar 18, 16:58 · Monitoring and reporting, Secure HA tunnels
yousra updated the task description for T2274: Configure CARP to send advertisements in unicast mode.
Wed, Mar 18, 15:04 · Monitoring and reporting, Salt, Secure HA tunnels
yousra updated the task description for T2274: Configure CARP to send advertisements in unicast mode.
Wed, Mar 18, 15:03 · Monitoring and reporting, Salt, Secure HA tunnels
yousra updated the task description for T2274: Configure CARP to send advertisements in unicast mode.
Wed, Mar 18, 14:48 · Monitoring and reporting, Salt, Secure HA tunnels
yousra added a revision to T2274: Configure CARP to send advertisements in unicast mode: D4009: Read the CARP peer parameter from pillar.
Wed, Mar 18, 13:35 · Monitoring and reporting, Salt, Secure HA tunnels
yousra added a revision to T2205: Enable CARP high-availability on router-002 and router-003: D4006: Automate CARP activation and parameter preemption.
Wed, Mar 18, 12:05 · Vault, Monitoring and reporting, Salt, Secure HA tunnels
yousra added a revision to T2274: Configure CARP to send advertisements in unicast mode: D4008: Add the CARP peer parameter to the generated pillar configuration.
Wed, Mar 18, 12:01 · Monitoring and reporting, Salt, Secure HA tunnels
yousra updated the task description for T2274: Configure CARP to send advertisements in unicast mode.
Wed, Mar 18, 11:58 · Monitoring and reporting, Salt, Secure HA tunnels
yousra updated the task description for T2274: Configure CARP to send advertisements in unicast mode.
Wed, Mar 18, 11:17 · Monitoring and reporting, Salt, Secure HA tunnels
yousra updated the task description for T2274: Configure CARP to send advertisements in unicast mode.
Wed, Mar 18, 09:08 · Monitoring and reporting, Salt, Secure HA tunnels
yousra updated the task description for T2274: Configure CARP to send advertisements in unicast mode.
Wed, Mar 18, 08:25 · Monitoring and reporting, Salt, Secure HA tunnels

Tue, Mar 17

dereckson added a comment to T2276: Automate CARP VIP MAC reassignment using devd and OVH API.

If we trigger the script through devd, we can provide a .conf configuration file in /usr/local/etc/devd.

Tue, Mar 17, 20:30 · Monitoring and reporting, Python, Secure HA tunnels
dereckson triaged T2275: Decommission router-001 as Normal priority.
Tue, Mar 17, 20:15 · Secure HA tunnels
dereckson renamed T2275: Decommission router-001 from Decomission router-001 to Decommission router-001.
Tue, Mar 17, 20:14 · Secure HA tunnels
dereckson triaged T2278: Recreate GRE tunnels on router-002 and router-003 as Normal priority.
Tue, Mar 17, 20:14 · Secure HA tunnels
dereckson added a parent task for T2277: Check DNS records with reference to router-001: T2275: Decommission router-001.
Tue, Mar 17, 20:13 · DNS, Secure HA tunnels
dereckson added a subtask for T2275: Decommission router-001: T2277: Check DNS records with reference to router-001.
Tue, Mar 17, 20:13 · Secure HA tunnels