ip_forward: create role + playbook

playbooks/ip_forward.yml

@@ -0,0 +1,8 @@
+#!/usr/bin/env ansible-playbook
+---
+- hosts:
+    - edge-1.rtr.infra.auro.re
+    - edge-2.rtr.infra.auro.re
+  roles:
+    - ip_forward
+...

roles/ip_forward/handlers/main.yml

@@ -0,0 +1,4 @@
+---
+- name: Reload sysctl
+  command: sysctl --system
+...

roles/ip_forward/tasks/main.yml

@@ -0,0 +1,11 @@
+---
+- name: Enable forwarding
+  template:
+    src: 10-forward.conf.j2
+    dest: /etc/sysctl.d/10-forward.conf
+    owner: root
+    group: root
+    mode: u=rw,g=r,o=r
+  notify:
+    - Reload sysctl
+...

roles/ip_forward/templates/10-forward.conf.j2

@@ -0,0 +1,8 @@
+{{ ansible_managed | comment }}
+
+# Enable IPv4 forwarding
+net.ipv4.ip_forward=1
+net.ipv4.conf.all.forwarding=1
+
+# Enable IPv6 forwarding
+net.ipv6.conf.all.forwarding=1