aurore/ansible
aurore/ansible
11
2
Fork 0
Code Issues 1 Pull requests 13 Releases Wiki Activity

[keepalived] Use KA IP as gateway on VLAN 129 rather than add buggy gateway (may generate self loops but this is more stable)

Browse source 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
This commit is contained in:
ynerant 2021-07-19 21:31:01 +02:00
parent a0b05c51b3
commit b1449f5b1a
Signed by untrusted user: ynerant
GPG key ID: 3A75C55819C8CF85
2 changed files with 2 additions and 64 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
roles/router/templates/interfaces-aurore
View file

@ -11,10 +11,12 @@ iface lo inet loopback
auto ens18
iface ens18 inet static
address 10.129.0.{{ router_hard_ip_suffix }}/16
gateway 10.129.0.254
ip-forward 1 # FIXME adm should not be routed in the future
iface ens18 inet6 static
address 2a09:6840:129::0:{{ router_hard_ip_suffix }}/64
gateway 2a09:6840:129::0:254
ip-forward 1

64
roles/router/templates/keepalived-aurore.conf
View file

@ -115,38 +115,6 @@ vrrp_instance VI_ROUT_aurore_IPv4 {
}
}
vrrp_instance VI_ROUT_{{ apartment_block }}_IPv4_GTW {
{% if 'backup' in inventory_hostname %}
state MASTER
priority 150
{% else %}
state BACKUP
priority 100
{% endif %}
# Interface used for VRRP communication.
interface ens19
# Shared by MASTER and BACKUP
virtual_router_id 5{{ apartment_block_id }}
# Timeout in seconds before failover kicks in.
advert_int 2
# Used to authenticate VRRP communication between master and backup.
authentication {
auth_type PASS
auth_pass 48gbsassybbhaeFjoAjp
}
smtp_alert
virtual_routes {
# Gateway to routeur-aurore by default
src 45.66.111.140 to 0.0.0.0/0 via 10.129.0.254 dev ens18
}
}
vrrp_instance VI_ROUT_aurore_IPv6 {
{% if 'backup' in inventory_hostname %}
state BACKUP
@ -212,35 +180,3 @@ vrrp_instance VI_ROUT_aurore_IPv6 {
2a09:6840:51::/64 via 2a09:6840:129::5:254 dev ens18
}
}
vrrp_instance VI_ROUT_{{ apartment_block }}_IPv6_GTW {
{% if 'backup' in inventory_hostname %}
state MASTER
priority 150
{% else %}
state BACKUP
priority 100
{% endif %}
# Interface used for VRRP communication.
interface ens19
# Shared by MASTER and BACKUP
virtual_router_id 7{{ apartment_block_id }}
# Timeout in seconds before failover kicks in.
advert_int 2
# Used to authenticate VRRP communication between master and backup.
authentication {
auth_type PASS
auth_pass 48gbsassybbhaeFjoAjp
}
smtp_alert
virtual_routes {
src 2a09:6840:129::240 to ::/0 via 2a09:6840:129::254 dev ens18
}
}