Create GRE tunnels:
Eglide can currently be ignored.
Hypervisors offers a small router server instance to use with a virtual card on each machine (e.g. IntraNought, see T1478). We can use one of them, let's pick router-001, to link baremetals.
| rOPS Nasqueron Operations | |||
| D2594 | rOPSdd9568c152dd Reconfigure GRE tunnels | ||
| D2596 | rOPS6deb32e01378 Set kernel state for router | ||
| D2303 | rOPS691c2f456811 Create GRE tunnel between WindRiver and Ysul | ||
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | dereckson | T928 Deploy Vault to store credentials | |||
| Resolved | dereckson | T923 Switch Vault to restricted network | |||
| Unknown Object (Maniphest Task) | |||||
| Open | None | T1616 Build a bastion - load balancers - private instances network topology | |||
| Resolved | dereckson | T1702 Deploy Complector aka la source | |||
| Resolved | dereckson | T1619 Connect all baremetal servers to Drake network | |||
| Resolved | dereckson | T1521 Restrict MySQL access |
There is a concurrent approach through tinc deployed on devserver WindRiver:
$ ifconfig tun0 tun0: flags=8043<UP,BROADCAST,RUNNING,MULTICAST> metric 0 mtu 1500 options=80000<LINKSTATE> inet 172.27.27.27 netmask 0xfffffe00 broadcast 172.27.27.255 groups: tun nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL> Opened by PID 901 $ ps auxw | grep 901 root 901 0.0 0.0 17624 5988 - Ss 18Jan22 2:29.96 /usr/local/sbin/tincd -n drake_wind $ ls /usr/local/etc/tinc/drake_wind ed25519_key.priv invitation-data tinc-up hosts rsa_key.priv tinc.conf
Name = drake_wind ConnectTo = drake_router_001
#!/bin/sh ifconfig $INTERFACE 172.27.27.27 netmask 255.255.254.0