Page MenuHomeDevCentral

Add Salt reactor for GRE tunnel creation on CARP failover
Needs ReviewPublic

Authored by yousra on Wed, Apr 29, 17:48.
Tags
None
Referenced Files
F28147666: D4098.id10734.diff
Sun, May 10, 06:59
F28147626: D4098.id10743.diff
Sun, May 10, 06:58
F28147619: D4098.id10727.diff
Sun, May 10, 06:58
F28147562: D4098.id10742.diff
Sun, May 10, 06:58
F28140595: D4098.id10744.diff
Sun, May 10, 06:06
F28140589: D4098.id10735.diff
Sun, May 10, 06:06
F28140580: D4098.id10728.diff
Sun, May 10, 06:06
F28126483: D4098.id10745.diff
Sun, May 10, 04:21

Details

Summary

Add a Salt reactor configuration to automatically reconfigure GRE tunnels when a CARP primary change occurs.

This introduces:

  • reactor.conf: listens to the event network/carp/primary
  • tunnels.sls: reactor state that triggers tunnel reconfiguration on all relevant nodes

The reactor executes a script on:

  • ysul
  • windriver
  • router-002
  • router-003

Additionally:

  • A new state roles/core/network/tunnels.sls is added to deploy the create-tunnels.sh script on routers and devservers (the targets)

Also the reactor will call ospf.sls that will call /usr/local/libexec/frr/set-ospf-default-route developped in D4093

Ref T2319

Test Plan
  • Simulate CARP failover
  • Verify the Salt event is send
  • Check that the reactor executes tunnels.sls
  • Validate GRE interfaces are recreated correctly

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Passed
Unit
No Test Coverage
Branch
arcpatch-D4098
Build Status
Buildable 6698
Build 6986: arc lint + arc unit

Event Timeline

yousra requested review of this revision.Wed, Apr 29, 17:48
yousra created this revision.

Changed the interface name from windriver to primary router (gre1 instead of gre2)

Changed the file tunnels.sls : create tunnels on routers and after on clients (windriver and ysul)

Updated GRE/IPsec failover script

Script for creation GRE tunnel will now send logs to a correct file syslog

Updated connection names for IKE and children

Added sleep command to avoid conflitct between commands for the IKE to be mounted correctly

Fixed the commit that now have all the ipsec config

yousra retitled this revision from Add Salt reactor for GRE tunnel creation on CARP failover to Add Salt reactor for GRE tunnel creation on CARP failover .Wed, May 6, 13:40
yousra edited the summary of this revision. (Show Details)
yousra retitled this revision from Add Salt reactor for GRE tunnel creation on CARP failover to Add Salt reactor for GRE tunnel creation on CARP failover.

Added reactor to trigger default route advertise OSPF