aurore/ansible
aurore/ansible
11
2
Fork 0
Code Issues 1 Pull requests 13 Releases Wiki Activity

Add gateway to other routeur-aurore in BACKUP state, but we should do better

Browse source 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
This commit is contained in:
ynerant 2021-07-04 13:45:40 +02:00
parent fc8e8de428
commit 8645cc9c26
Signed by untrusted user: ynerant
GPG key ID: 3A75C55819C8CF85
1 changed files with 64 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

64
roles/router/templates/keepalived-aurore.conf
View file

@ -112,6 +112,38 @@ vrrp_instance VI_ROUT_aurore_IPv4 {
} }
} }
vrrp_instance VI_ROUT_{{ apartment_block }}_IPv4_GTW {
{% if 'backup' in inventory_hostname %}
state MASTER
priority 150
{% else %}
state BACKUP
priority 100
{% endif %}
# Interface used for VRRP communication.
interface ens19
# Shared by MASTER and BACKUP
virtual_router_id 5{{ apartment_block_id }}
# Timeout in seconds before failover kicks in.
advert_int 2
# Used to authenticate VRRP communication between master and backup.
authentication {
auth_type PASS
auth_pass 48gbsassybbhaeFjoAjp
}
smtp_alert
virtual_routes {
# Gateway to routeur-aurore by default
src 45.66.111.140 to 0.0.0.0/0 via 10.129.0.254 dev ens18
}
}
vrrp_instance VI_ROUT_aurore_IPv6 { vrrp_instance VI_ROUT_aurore_IPv6 {
{% if 'backup' in inventory_hostname %} {% if 'backup' in inventory_hostname %}
state BACKUP state BACKUP
@ -174,3 +206,35 @@ vrrp_instance VI_ROUT_aurore_IPv6 {
2a09:6840:51::/64 via 2a09:6840:129::5:254 dev ens18 2a09:6840:51::/64 via 2a09:6840:129::5:254 dev ens18
} }
} }
vrrp_instance VI_ROUT_{{ apartment_block }}_IPv6_GTW {
{% if 'backup' in inventory_hostname %}
state MASTER
priority 150
{% else %}
state BACKUP
priority 100
{% endif %}
# Interface used for VRRP communication.
interface ens19
# Shared by MASTER and BACKUP
virtual_router_id 7{{ apartment_block_id }}
# Timeout in seconds before failover kicks in.
advert_int 2
# Used to authenticate VRRP communication between master and backup.
authentication {
auth_type PASS
auth_pass 48gbsassybbhaeFjoAjp
}
smtp_alert
virtual_routes {
src 2a09:6840:129::240 to ::/0 via 2a09:6840:129::254 dev ens18
}
}