Page MenuHomeDevCentral
Files F35249553

D4099.diff
No OneTemporary
Actions

D4099.diff
View Options

diff --git a/roles/router/init.sls b/roles/router/init.sls
--- a/roles/router/init.sls
+++ b/roles/router/init.sls
@@ -8,3 +8,4 @@
include:
- .carp
- .frrouting
+ - .pf
diff --git a/roles/router/pf/files/router.conf b/roles/router/pf/files/router.conf
new file mode 100644
--- /dev/null
+++ b/roles/router/pf/files/router.conf
@@ -0,0 +1,28 @@
+# -------------------------------------------------------------
+# Network — pf router configuration
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Project: Nasqueron
+# License: Trivial work, not eligible to copyright
+# Source file: roles/router/pf/files/router.conf
+# -------------------------------------------------------------
+#
+# <auto-generated>
+# This file is managed by our rOPS SaltStack repository.
+#
+# Changes to this file may cause incorrect behavior
+# and will be lost if the state is redeployed.
+# </auto-generated>
+
+### Macros ###
+public_interface="vmx1"
+intranought_interface="vmx0"
+net_intranought="172.27.27.0/27"
+
+### Options
+set skip on lo
+
+### Normalization
+scrub in all fragment reassemble
+
+### Nat for Intranought
+nat on $public_interface from $net_intranought to any -> ($public_interface)
diff --git a/roles/router/init.sls b/roles/router/pf/init.sls
copy from roles/router/init.sls
copy to roles/router/pf/init.sls
--- a/roles/router/init.sls
+++ b/roles/router/pf/init.sls
@@ -1,10 +1,17 @@
# -------------------------------------------------------------
-# Salt — Router
+# Salt — Router — pf
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
# Project: Nasqueron
# License: Trivial work, not eligible to copyright
# -------------------------------------------------------------
-include:
- - .carp
- - .frrouting
+/etc/pf.conf.d/router.conf:
+ file.managed:
+ - source: salt://roles/router/pf/files/router.conf
+ - makedirs: True
+ - mode: 644
+
+add_router_include:
+ file.append:
+ - name: /etc/pf.conf
+ - text: include "/etc/pf.conf.d/router.conf"

File Metadata

Mime Type
text/plain
Expires
Thu, Jul 9, 06:36 (2 h, 44 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
3909472
Default Alt Text
D4099.diff (2 KB)

Event Timeline

Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator