ansible/playbooks/bird.yml

#!/usr/bin/env ansible-playbook
---
- hosts:
    - infra
    - isp
    - vpn
  roles:
    - bird

#- hosts:
#    - isp-1.back.infra.auro.re
#    - isp-2.back.infra.auro.re
#  vars:
#    bird__router_ids:
#      isp-1.back.infra.auro.re: 10.203.1.5
#      isp-2.back.infra.auro.re: 10.203.1.6
#    bird__router_id: "{{ bird__router_ids[inventory_hostname] }}"
#    bird__radv_interfaces:
#      client0:
#        prefix:
#          - 2a09:6841::/64
#        domain_search:
#          - client0.isp.auro.re
#      client1:
#        prefix:
#          - 2a09:6841:0:1::/64
#        domain_search:
#          - client1.isp.auro.re
#      client2:
#        prefix:
#          - 2a09:6841:0:2::/64
#        domain_search:
#          - client2.isp.auro.re
#      client3:
#        prefix:
#          - 2a09:6841:0:3::/64
#        domain_search:
#          - client3.isp.auro.re
#      client4:
#        prefix:
#          - 2a09:6841:0:400::/64
#        domain_search:
#          - client4.isp.auro.re
#    bird__radv_dns_servers:
#      - 2a09:6840:128::10:103
#      - 2a09:6840:128::10:3
#    bird__asn:
#      aurore: 43619
#    bird__bgp_addresses:
#      isp-1.back.infra.auro.re:
#        - 2a09:6840:203::1:5
#        - 10.203.1.5
#      isp-2.back.infra.auro.re:
#        - 2a09:6840:203::1:6
#        - 10.203.1.6
#    bird__bgp_sessions:
#      edge1:
#        local:
#          address: "{{ bird__bgp_addresses[inventory_hostname] }}"
#          as: "{{ bird__asn.aurore }}"
#        remote:
#          address:
#            - 2a09:6840:203::1:1
#            - 10.203.1.1
#          as: "{{ bird__asn.aurore }}"
#        import:
#          - accept: true
#        export:
#          - accept: false
#      edge2:
#        local:
#          address: "{{ bird__bgp_addresses[inventory_hostname] }}"
#          as: "{{ bird__asn.aurore }}"
#        remote:
#          address:
#            - 2a09:6840:203::1:2
#            - 10.203.1.2
#          as: "{{ bird__asn.aurore }}"
#        import:
#          - accept: true
#        export:
#          - accept: false
#    bird__ospf_broadcast_interfaces:
#      back0: null
#    bird__ospf_stub_interfaces:
#      - client0
#      - client1
#      - client2
#      - client3
#      - client4
#  roles:
#    - bird


#- hosts:
#    - infra-1.back.infra.auro.re
#    - infra-2.back.infra.auro.re
#  vars:
#    bird__router_ids:
#      infra-1.back.infra.auro.re: 10.203.1.3
#      infra-2.back.infra.auro.re: 10.203.1.4
#    bird__router_id: "{{ bird__router_ids[inventory_hostname] }}"
#    bird__ospf_broadcast_interfaces:
#      back0: null
#    bird__ospf_stub_interfaces:
#      - monit0
#      - wifi0
#      - int0
#      - pub0
#      - bmc0
#      - pve0
#      - isp0
#      - mgmt0
#    bird__asn:
#      aurore: 43619
#    bird__bgp_addresses:
#      infra-1.back.infra.auro.re:
#        - 2a09:6840:203::1:3
#        - 10.203.1.3
#      infra-2.back.infra.auro.re:
#        - 2a09:6840:203::1:4
#        - 10.203.1.4
#    bird__bgp_sessions:
#      edge1:
#        local:
#          address: "{{ bird__bgp_addresses[inventory_hostname] }}"
#          as: "{{ bird__asn.aurore }}"
#        remote:
#          address:
#            - 2a09:6840:203::1:1
#            - 10.203.1.1
#          as: "{{ bird__asn.aurore }}"
#        import:
#          - accept: true
#        export:
#          - accept: false
#      edge2:
#        local:
#          address: "{{ bird__bgp_addresses[inventory_hostname] }}"
#          as: "{{ bird__asn.aurore }}"
#        remote:
##          address:
#            - 2a09:6840:203::1:2
#            - 10.203.1.2
#          as: "{{ bird__asn.aurore }}"
#        import:
#          - accept: true
#        export:
#          - accept: false
#  roles:
#    - bird

#- hosts:
#    - edge-1.back.infra.auro.re
#    - edge-2.back.infra.auro.re
#  vars:
#    bird__router_ids:
#      edge-1.back.infra.auro.re: 10.203.1.1
#      edge-2.back.infra.auro.re: 10.203.1.2
#    bird__asn:
#      aurore: 43619
#      crans: 204515
#      zayo: 8218
#      viarezo: 212424
#      rezel: 199116
#    bird__orig_prefixes:
#      aurore:
#        - 45.66.108.0/22
#        - 2a09:6840::/32
#        - 2a09:6841::/32
#        - 2a09:6842::/32
#      crans:
#        - 185.230.76.0/22
#        - 2a0c:700::/32
#      viarezo:
#        - 138.195.144.0/20
#        - 192.159.121.0/24
#        - 2a0c:b641:2f0::/44
#      rezel:
#        - 137.194.8.0/22
#        - 2a09:6847::/32
#      martians:
#        - 10.0.0.0/8
#        - 172.16.0.0/12
#        - 192.168.0.0/16
#        - 100.64.0.0/10
#        - 127.0.0.0/8
#        - 169.254.0.0/16
#        - 192.0.0.0/24
#        - 192.0.2.0/24
#        - 198.18.0.0/15
#        - 198.51.100.0/24
#        - 203.0.113.0/24
#        - 224.0.0.0/4
#        - 240.0.0.0/4
#        - ::/128
#        - ::1/128
#        - ::ffff:0:0/96
#        - ::/96
#        - 100::/64
#        - 2001:10::/28
#        - 2001:db8::/32
#        - fc00::/7
#        - fe80::/10
#        - fec0::/10
#        - ff00::/8
#    bird__router_id: "{{ bird__router_ids[inventory_hostname] }}"
#    bird__bgp_addresses:
#      edge:
#        edge-1.back.infra.auro.re:
#          - 2a09:6840:203::1:1
#          - 10.203.1.1
#        edge-2.back.infra.auro.re:
#            - 2a09:6840:203::1:2
#            - 10.203.1.2
#      legacy:
#        edge-1.back.infra.auro.re:
#          - 2a09:6840:129::10:2
#          - 10.129.10.2
#        edge-2.back.infra.auro.re:
#          - 2a09:6840:129::10:102
#          - 10.129.10.102
#      rezel:
#        edge-1.back.infra.auro.re:
#          - 2a09:6842:19:9116::1
#          - 45.66.111.1
#        edge-2.back.infra.auro.re:
#          - 2a09:6842:19:9116::3
#          - 45.66.111.3
#    bird__bgp_sessions:
#      edge:
#        local:
#          address: "{{ bird__bgp_addresses.edge[inventory_hostname] }}"
#          as: "{{ bird__asn.aurore }}"
#        remote:
#          address: "{{ bird__bgp_addresses.edge
#                       | dict2items
#                       | selectattr('key', '!=', inventory_hostname)
#                       | map(attribute='value')
#                       | first }}"
#          as: "{{ bird__asn.aurore }}"
#        import:
#          - accept: true
#        export:
#          - local_pref: 75
#            accept: true
#      vpn1:
#        local:
#          address: "{{ bird__bgp_addresses.edge[inventory_hostname] }}"
#          as: "{{ bird__asn.aurore }}"
#        remote:
#          address:
#            - 2a09:6840:203::1:7
#            - 10.203.1.7
#          as: "{{ bird__asn.aurore }}"
#        import:
#          - accept: false
#        export:
#          - accept: true
#      vpn2:
#        local:
#          address: "{{ bird__bgp_addresses.edge[inventory_hostname] }}"
#          as: "{{ bird__asn.aurore }}"
#        remote:
#          address:
#            - 2a09:6840:203::1:8
#            - 10.203.1.8
#          as: "{{ bird__asn.aurore }}"
#        import:
#          - accept: false
#        export:
#          - accept: false
#      legacy:
#        next_hop_self: true
#        local:
#          address: "{{ bird__bgp_addresses.legacy[inventory_hostname] }}"
#          as: "{{ bird__asn.aurore }}"
#        remote:
#          address:
#            - 2a09:6840:129::240
#            - 10.129.0.240
#          as: "{{ bird__asn.aurore }}"
#        import:
#          - accept: false
#        export:
#          - bgp_proto:
#              - crans
#              - zayo
#              - rezel1
#              - rezel2
#            accept: true
#          - accept: false
#      zayo:
#        local:
#          address:
#            - 83.167.52.69
#            - 2001:1b48:2:103::d7:2
#          as: "{{ bird__asn.aurore }}"
#        remote:
#          address:
#            - 83.167.52.68
#            - 2001:1b48:2:103::d7:1
#          as: "{{ bird__asn.zayo }}"
#        import:
#          - prefix: "{{ bird__orig_prefixes.martians }}"
#            sub: true
#            accept: false
#          - accept: true
#        export:
#          - prefix: "{{ ['aurore', 'crans', 'viarezo', 'rezel']
#                        | map('extract', bird__orig_prefixes)
#                        | flatten }}"
#            sub: true
#            accept: true
##          - accept: false
#      crans:
#        local:
#          address:
#            - 185.230.79.254
#            - 2a0c:700:28::2
#          as: "{{ bird__asn.aurore }}"
#        remote:
#          address:
#            - 185.230.79.253
#            - 2a0c:700:28::1
#          as: "{{ bird__asn.crans }}"
#        import:
#          - prefix: "{{ bird__orig_prefixes.crans }}"
#            sub: true
#            accept: true
#          - accept: false
#        export:
#          - bgp_proto:
#              - viarezo
#              - rezel1
#              - rezel2
#              - zayo
#            accept: true
#          - prefix: "{{ bird__orig_prefixes.aurore }}"
#            sub: true
#            accept: true
#          - accept: false
#      rezel1:
#        local:
#          address: "{{ bird__bgp_addresses.rezel[inventory_hostname] }}"
#          as: "{{ bird__asn.aurore }}"
#        remote:
#          address:
#            - 2a09:6842:19:9116::2
#            - 45.66.111.2
#          as: "{{ bird__asn.rezel }}"
#        import:
#          - prefix: "{{ bird__orig_prefixes.rezel }}"
#            sub: true
#            accept: true
#          - accept: false
#        export:
#          - bgp_proto:
#              - edge
#              - viarezo
#              - crans
#              - zayo
#            accept: true
#          - prefix: "{{ bird__orig_prefixes.aurore }}"
#            sub: true
#            accept: true
#          - accept: false
#      rezel2:
#        local:
#          address: "{{ bird__bgp_addresses.rezel[inventory_hostname] }}"
#          as: "{{ bird__asn.aurore }}"
#        remote:
#          address:
#            - 2a09:6842:19:9116::4
#            - 45.66.111.4
#          as: "{{ bird__asn.rezel }}"
#        import:
#          - local_pref: 75
#          - prefix: "{{ bird__orig_prefixes.rezel }}"
#            sub: true
#            accept: true
#          - accept: false
#        export:
#          - bgp_proto:
#              - edge
#              - viarezo
#              - crans
#              - zayo
#            accept: true
#          - prefix: "{{ bird__orig_prefixes.aurore }}"
#            sub: true
#            accept: true
#          - accept: false
#      viarezo:
#        local:
#          address:
#            - 192.159.121.134
#            - 2a0c:b641:2ff::6
#          as: "{{ bird__asn.aurore }}"
#        remote:
#          address:
#            - 192.159.121.133
#            - 2a0c:b641:2ff::5
#          as: "{{ bird__asn.viarezo }}"
#        import:
#          - prefix: "{{ bird__orig_prefixes.martians }}"
#            accept: false
#          - prefix: "{{ bird__orig_prefixes.viarezo }}"
#            sub: true
#            negate: true
#            local_pref: 50
#          - accept: true
#        export:
#          - prefix: "{{ bird__orig_prefixes.aurore }}"
#            as_prepend:
#              asn: "{{ bird__asn.aurore }}"
#              size: 5
#          - bgp_proto:
#              - crans
#              - zayo
#            accept: true
#          - accept: false
#    bird__ospf_broadcast_interfaces:
#      back0: null
#    bird__ospf_stub_interfaces:
#      - crans0
#      - zayo0
#      - rezel0
#      - viarezo0
#    bird__static_unreachable: "{{ bird__orig_prefixes.aurore }}"
#  roles:
#    - bird

#- hosts:
#    - vpn-1.back.infra.auro.re
#    - vpn-2.back.infra.auro.re
#  vars:
#    bird__asn:
#      aurore: 43619
#    bird__router_ids:
#      vpn-1.back.infra.auro.re: 10.203.1.7
#      vpn-2.back.infra.auro.re: 10.203.1.8
#    bird__router_id: "{{ bird__router_ids[inventory_hostname] }}"
#    bird__bgp_addresses:
#      vpn-1.back.infra.auro.re:
#        - 2a09:6840:203::1:7
#        - 10.203.1.7
#      vpn-2.back.infra.auro.re:
#        - 2a09:6840:203::1:8
#        - 10.203.1.8
#    bird__bgp_sessions:
#      edge1:
#        local:
#          address: "{{ bird__bgp_addresses[inventory_hostname] }}"
#          as: "{{ bird__asn.aurore }}"
#        remote:
#          address:
#            - 2a09:6840:203::1:1
#            - 10.203.1.1
#          as: "{{ bird__asn.aurore }}"
#        import:
#          - accept: true
#        export:
#          - accept: false
#      edge2:
#        local:
#          address: "{{ bird__bgp_addresses[inventory_hostname] }}"
#          as: "{{ bird__asn.aurore }}"
#        remote:
#          address:
#            - 2a09:6840:203::1:2
#            - 10.203.1.2
#          as: "{{ bird__asn.aurore }}"
#        import:
#          - accept: true
#        export:
#          - accept: false
#    bird__ospf_broadcast_interfaces:
#      back0: null
#    bird__ospf_stub_interfaces:
##      - wg0
#  roles:
#    - bird
...