549 lines
14 KiB
YAML
Executable file
549 lines
14 KiB
YAML
Executable file
#!/usr/bin/env ansible-playbook
|
|
---
|
|
#- hosts:
|
|
# - isp-1.back.infra.auro.re
|
|
# - isp-2.back.infra.auro.re
|
|
# vars:
|
|
# bird__router_ids:
|
|
# isp-1.back.infra.auro.re: 10.203.1.5
|
|
# isp-2.back.infra.auro.re: 10.203.1.6
|
|
# bird__router_id: "{{ bird__router_ids[inventory_hostname] }}"
|
|
# bird__radv_interfaces:
|
|
# client0:
|
|
# prefix:
|
|
# - 2a09:6841::/64
|
|
# domain_search:
|
|
# - client0.isp.auro.re
|
|
# client1:
|
|
# prefix:
|
|
# - 2a09:6841:0:1::/64
|
|
# domain_search:
|
|
# - client1.isp.auro.re
|
|
# client2:
|
|
# prefix:
|
|
# - 2a09:6841:0:2::/64
|
|
# domain_search:
|
|
# - client2.isp.auro.re
|
|
# client3:
|
|
# prefix:
|
|
# - 2a09:6841:0:3::/64
|
|
# domain_search:
|
|
# - client3.isp.auro.re
|
|
# client4:
|
|
# prefix:
|
|
# - 2a09:6841:0:400::/64
|
|
# domain_search:
|
|
# - client4.isp.auro.re
|
|
# bird__radv_dns_servers:
|
|
# - 2a09:6840:128::10:103
|
|
# - 2a09:6840:128::10:3
|
|
# bird__asn:
|
|
# aurore: 43619
|
|
# bird__bgp_addresses:
|
|
# isp-1.back.infra.auro.re:
|
|
# - 2a09:6840:203::1:5
|
|
# - 10.203.1.5
|
|
# isp-2.back.infra.auro.re:
|
|
# - 2a09:6840:203::1:6
|
|
# - 10.203.1.6
|
|
# bird__bgp_sessions:
|
|
# edge1:
|
|
# local:
|
|
# address: "{{ bird__bgp_addresses[inventory_hostname] }}"
|
|
# as: "{{ bird__asn.aurore }}"
|
|
# remote:
|
|
# address:
|
|
# - 2a09:6840:203::1:1
|
|
# - 10.203.1.1
|
|
# as: "{{ bird__asn.aurore }}"
|
|
# import:
|
|
# - accept: true
|
|
# export:
|
|
# - accept: false
|
|
# edge2:
|
|
# local:
|
|
# address: "{{ bird__bgp_addresses[inventory_hostname] }}"
|
|
# as: "{{ bird__asn.aurore }}"
|
|
# remote:
|
|
# address:
|
|
# - 2a09:6840:203::1:2
|
|
# - 10.203.1.2
|
|
# as: "{{ bird__asn.aurore }}"
|
|
# import:
|
|
# - accept: true
|
|
# export:
|
|
# - accept: false
|
|
# bird__ospf_broadcast_interfaces:
|
|
# back0: null
|
|
# bird__ospf_stub_interfaces:
|
|
# - client0
|
|
# - client1
|
|
# - client2
|
|
# - client3
|
|
# - client4
|
|
# roles:
|
|
# - bird
|
|
|
|
|
|
- hosts:
|
|
- infra-1.back.infra.auro.re
|
|
- infra-2.back.infra.auro.re
|
|
vars:
|
|
bird__as:
|
|
aurore: 43619
|
|
bird__router_ids:
|
|
infra-1: 10.203.1.3
|
|
infra-2: 10.203.1.4
|
|
bird__pref_src_addrs:
|
|
infra-1:
|
|
- 2a09:6840:203::1:3
|
|
- 45.66.111.210
|
|
infra-2:
|
|
- 2a09:6840:203::1:4
|
|
- 45.66.111.211
|
|
bird__bgp_addrs:
|
|
infra-1:
|
|
back:
|
|
- 2a09:6840:203::1:3
|
|
- 10.203.1.3
|
|
infra-2:
|
|
back:
|
|
- 2a09:6840:203::1:4
|
|
- 10.203.1.4
|
|
bird__router_id: "{{ bird__router_ids[inventory_hostname_short] }}"
|
|
bird__kernel:
|
|
kernel:
|
|
learn: true
|
|
import: accept
|
|
export: accept
|
|
bird__ospf:
|
|
limits:
|
|
import: 4000
|
|
export: 4000
|
|
import: accept
|
|
export:
|
|
protos: kernel
|
|
areas:
|
|
0:
|
|
broadcast:
|
|
- back0
|
|
stub:
|
|
- monit0
|
|
- wifi0
|
|
- int0
|
|
- sw0
|
|
- bmc0
|
|
- pve0
|
|
- isp0
|
|
- ext0
|
|
- ups0
|
|
1:
|
|
broadcast:
|
|
- vpn0
|
|
bird__bgp:
|
|
edge1:
|
|
local:
|
|
address: "{{ bird__bgp_addrs[inventory_hostname_short].back }}"
|
|
as: "{{ bird__as.aurore }}"
|
|
neighbor:
|
|
address:
|
|
- 2a09:6840:203::1:1
|
|
- 10.203.1.1
|
|
as: "{{ bird__as.aurore }}"
|
|
import:
|
|
- pref_src: "{{ bird__pref_src_addrs[inventory_hostname_short] }}"
|
|
- accept
|
|
export: reject
|
|
roles:
|
|
- bird
|
|
|
|
#- hosts:
|
|
# - infra-1.back.infra.auro.re
|
|
# - infra-2.back.infra.auro.re
|
|
# vars:
|
|
# bird__router_ids:
|
|
# infra-1.back.infra.auro.re: 10.203.1.3
|
|
# infra-2.back.infra.auro.re: 10.203.1.4
|
|
# bird__router_id: "{{ bird__router_ids[inventory_hostname] }}"
|
|
# bird__ospf_broadcast_interfaces:
|
|
# back0: null
|
|
# bird__ospf_stub_interfaces:
|
|
# - monit0
|
|
# - wifi0
|
|
# - int0
|
|
# - pub0
|
|
# - bmc0
|
|
# - pve0
|
|
# - isp0
|
|
# - mgmt0
|
|
# bird__asn:
|
|
# aurore: 43619
|
|
# bird__bgp_addresses:
|
|
# infra-1.back.infra.auro.re:
|
|
# - 2a09:6840:203::1:3
|
|
# - 10.203.1.3
|
|
# infra-2.back.infra.auro.re:
|
|
# - 2a09:6840:203::1:4
|
|
# - 10.203.1.4
|
|
# bird__bgp_sessions:
|
|
# edge1:
|
|
# local:
|
|
# address: "{{ bird__bgp_addresses[inventory_hostname] }}"
|
|
# as: "{{ bird__asn.aurore }}"
|
|
# remote:
|
|
# address:
|
|
# - 2a09:6840:203::1:1
|
|
# - 10.203.1.1
|
|
# as: "{{ bird__asn.aurore }}"
|
|
# import:
|
|
# - accept: true
|
|
# export:
|
|
# - accept: false
|
|
# edge2:
|
|
# local:
|
|
# address: "{{ bird__bgp_addresses[inventory_hostname] }}"
|
|
# as: "{{ bird__asn.aurore }}"
|
|
# remote:
|
|
## address:
|
|
# - 2a09:6840:203::1:2
|
|
# - 10.203.1.2
|
|
# as: "{{ bird__asn.aurore }}"
|
|
# import:
|
|
# - accept: true
|
|
# export:
|
|
# - accept: false
|
|
# roles:
|
|
# - bird
|
|
|
|
- hosts:
|
|
- edge-1.back.infra.auro.re
|
|
- edge-2.back.infra.auro.re
|
|
vars:
|
|
bird__router_ids:
|
|
edge-1.back.infra.auro.re: 10.203.1.1
|
|
edge-2.back.infra.auro.re: 10.203.1.2
|
|
bird__asn:
|
|
aurore: 43619
|
|
crans: 204515
|
|
zayo: 8218
|
|
viarezo: 212424
|
|
rezel: 199116
|
|
bird__orig_prefixes:
|
|
aurore:
|
|
- 45.66.108.0/22
|
|
- 2a09:6840::/32
|
|
- 2a09:6841::/32
|
|
- 2a09:6842::/32
|
|
crans:
|
|
- 185.230.76.0/22
|
|
- 2a0c:700::/32
|
|
viarezo:
|
|
- 138.195.144.0/20
|
|
- 192.159.121.0/24
|
|
- 2a0c:b641:2f0::/44
|
|
rezel:
|
|
- 137.194.8.0/22
|
|
- 2a09:6847::/32
|
|
martians:
|
|
- 10.0.0.0/8
|
|
- 172.16.0.0/12
|
|
- 192.168.0.0/16
|
|
- 100.64.0.0/10
|
|
- 127.0.0.0/8
|
|
- 169.254.0.0/16
|
|
- 192.0.0.0/24
|
|
- 192.0.2.0/24
|
|
- 198.18.0.0/15
|
|
- 198.51.100.0/24
|
|
- 203.0.113.0/24
|
|
- 224.0.0.0/4
|
|
- 240.0.0.0/4
|
|
- ::/128
|
|
- ::1/128
|
|
- ::ffff:0:0/96
|
|
- ::/96
|
|
- 100::/64
|
|
- 2001:10::/28
|
|
- 2001:db8::/32
|
|
- fc00::/7
|
|
- fe80::/10
|
|
- fec0::/10
|
|
- ff00::/8
|
|
bird__router_id: "{{ bird__router_ids[inventory_hostname] }}"
|
|
bird__bgp_addresses:
|
|
edge:
|
|
edge-1.back.infra.auro.re:
|
|
- 2a09:6840:203::1:1
|
|
- 10.203.1.1
|
|
edge-2.back.infra.auro.re:
|
|
- 2a09:6840:203::1:2
|
|
- 10.203.1.2
|
|
legacy:
|
|
edge-1.back.infra.auro.re:
|
|
- 2a09:6840:129::10:2
|
|
- 10.129.10.2
|
|
edge-2.back.infra.auro.re:
|
|
- 2a09:6840:129::10:102
|
|
- 10.129.10.102
|
|
rezel:
|
|
edge-1.back.infra.auro.re:
|
|
- 2a09:6842:19:9116::1
|
|
- 45.66.111.1
|
|
edge-2.back.infra.auro.re:
|
|
- 2a09:6842:19:9116::3
|
|
- 45.66.111.3
|
|
bird__bgp_sessions:
|
|
edge:
|
|
local:
|
|
address: "{{ bird__bgp_addresses.edge[inventory_hostname] }}"
|
|
as: "{{ bird__asn.aurore }}"
|
|
remote:
|
|
address: "{{ bird__bgp_addresses.edge
|
|
| dict2items
|
|
| selectattr('key', '!=', inventory_hostname)
|
|
| map(attribute='value')
|
|
| first }}"
|
|
as: "{{ bird__asn.aurore }}"
|
|
import:
|
|
- accept: true
|
|
export:
|
|
- local_pref: 75
|
|
accept: true
|
|
vpn1:
|
|
local:
|
|
address: "{{ bird__bgp_addresses.edge[inventory_hostname] }}"
|
|
as: "{{ bird__asn.aurore }}"
|
|
remote:
|
|
address:
|
|
- 2a09:6840:203::1:7
|
|
- 10.203.1.7
|
|
as: "{{ bird__asn.aurore }}"
|
|
import:
|
|
- accept: false
|
|
export:
|
|
- accept: true
|
|
vpn2:
|
|
local:
|
|
address: "{{ bird__bgp_addresses.edge[inventory_hostname] }}"
|
|
as: "{{ bird__asn.aurore }}"
|
|
remote:
|
|
address:
|
|
- 2a09:6840:203::1:8
|
|
- 10.203.1.8
|
|
as: "{{ bird__asn.aurore }}"
|
|
import:
|
|
- accept: false
|
|
export:
|
|
- accept: false
|
|
legacy:
|
|
next_hop_self: true
|
|
local:
|
|
address: "{{ bird__bgp_addresses.legacy[inventory_hostname] }}"
|
|
as: "{{ bird__asn.aurore }}"
|
|
remote:
|
|
address:
|
|
- 2a09:6840:129::240
|
|
- 10.129.0.240
|
|
as: "{{ bird__asn.aurore }}"
|
|
import:
|
|
- accept: false
|
|
export:
|
|
- bgp_proto:
|
|
- crans
|
|
- zayo
|
|
- rezel1
|
|
- rezel2
|
|
accept: true
|
|
- accept: false
|
|
zayo:
|
|
local:
|
|
address:
|
|
- 83.167.52.69
|
|
- 2001:1b48:2:103::d7:2
|
|
as: "{{ bird__asn.aurore }}"
|
|
remote:
|
|
address:
|
|
- 83.167.52.68
|
|
- 2001:1b48:2:103::d7:1
|
|
as: "{{ bird__asn.zayo }}"
|
|
import:
|
|
- prefix: "{{ bird__orig_prefixes.martians }}"
|
|
sub: true
|
|
accept: false
|
|
- accept: true
|
|
export:
|
|
- prefix: "{{ ['aurore', 'crans', 'viarezo', 'rezel']
|
|
| map('extract', bird__orig_prefixes)
|
|
| flatten }}"
|
|
sub: true
|
|
accept: true
|
|
- accept: false
|
|
crans:
|
|
local:
|
|
address:
|
|
- 185.230.79.254
|
|
- 2a0c:700:28::2
|
|
as: "{{ bird__asn.aurore }}"
|
|
remote:
|
|
address:
|
|
- 185.230.79.253
|
|
- 2a0c:700:28::1
|
|
as: "{{ bird__asn.crans }}"
|
|
import:
|
|
- prefix: "{{ bird__orig_prefixes.crans }}"
|
|
sub: true
|
|
accept: true
|
|
- accept: false
|
|
export:
|
|
- bgp_proto:
|
|
- viarezo
|
|
- rezel1
|
|
- rezel2
|
|
- zayo
|
|
accept: true
|
|
- prefix: "{{ bird__orig_prefixes.aurore }}"
|
|
sub: true
|
|
accept: true
|
|
- accept: false
|
|
rezel1:
|
|
local:
|
|
address: "{{ bird__bgp_addresses.rezel[inventory_hostname] }}"
|
|
as: "{{ bird__asn.aurore }}"
|
|
remote:
|
|
address:
|
|
- 2a09:6842:19:9116::2
|
|
- 45.66.111.2
|
|
as: "{{ bird__asn.rezel }}"
|
|
import:
|
|
- prefix: "{{ bird__orig_prefixes.rezel }}"
|
|
sub: true
|
|
accept: true
|
|
- accept: false
|
|
export:
|
|
- bgp_proto:
|
|
- edge
|
|
- viarezo
|
|
- crans
|
|
- zayo
|
|
accept: true
|
|
- prefix: "{{ bird__orig_prefixes.aurore }}"
|
|
sub: true
|
|
accept: true
|
|
- accept: false
|
|
rezel2:
|
|
local:
|
|
address: "{{ bird__bgp_addresses.rezel[inventory_hostname] }}"
|
|
as: "{{ bird__asn.aurore }}"
|
|
remote:
|
|
address:
|
|
- 2a09:6842:19:9116::4
|
|
- 45.66.111.4
|
|
as: "{{ bird__asn.rezel }}"
|
|
import:
|
|
- local_pref: 75
|
|
- prefix: "{{ bird__orig_prefixes.rezel }}"
|
|
sub: true
|
|
accept: true
|
|
- accept: false
|
|
export:
|
|
- bgp_proto:
|
|
- edge
|
|
- viarezo
|
|
- crans
|
|
- zayo
|
|
accept: true
|
|
- prefix: "{{ bird__orig_prefixes.aurore }}"
|
|
sub: true
|
|
accept: true
|
|
- accept: false
|
|
# viarezo:
|
|
# local:
|
|
# address:
|
|
# - 192.159.121.134
|
|
# - 2a0c:b641:2ff::6
|
|
# as: "{{ bird__asn.aurore }}"
|
|
# remote:
|
|
# address:
|
|
# - 192.159.121.133
|
|
# - 2a0c:b641:2ff::5
|
|
# as: "{{ bird__asn.viarezo }}"
|
|
# import:
|
|
# - prefix: "{{ bird__orig_prefixes.martians }}"
|
|
# accept: false
|
|
# - prefix: "{{ bird__orig_prefixes.viarezo }}"
|
|
# sub: true
|
|
# negate: true
|
|
# local_pref: 50
|
|
# - accept: true
|
|
# export:
|
|
# - prefix: "{{ bird__orig_prefixes.aurore }}"
|
|
# as_prepend:
|
|
# asn: "{{ bird__asn.aurore }}"
|
|
# size: 5
|
|
# - bgp_proto:
|
|
# - crans
|
|
# - zayo
|
|
# accept: true
|
|
# - accept: false
|
|
bird__ospf_broadcast_interfaces:
|
|
back0: null
|
|
bird__ospf_stub_interfaces:
|
|
- crans0
|
|
- zayo0
|
|
- rezel0
|
|
- viarezo0
|
|
bird__static_unreachable: "{{ bird__orig_prefixes.aurore }}"
|
|
roles:
|
|
- bird
|
|
|
|
- hosts:
|
|
- vpn-1.back.infra.auro.re
|
|
- vpn-2.back.infra.auro.re
|
|
vars:
|
|
bird__asn:
|
|
aurore: 43619
|
|
bird__router_ids:
|
|
vpn-1.back.infra.auro.re: 10.203.1.7
|
|
vpn-2.back.infra.auro.re: 10.203.1.8
|
|
bird__router_id: "{{ bird__router_ids[inventory_hostname] }}"
|
|
bird__bgp_addresses:
|
|
vpn-1.back.infra.auro.re:
|
|
- 2a09:6840:203::1:7
|
|
- 10.203.1.7
|
|
vpn-2.back.infra.auro.re:
|
|
- 2a09:6840:203::1:8
|
|
- 10.203.1.8
|
|
bird__bgp_sessions:
|
|
edge1:
|
|
local:
|
|
address: "{{ bird__bgp_addresses[inventory_hostname] }}"
|
|
as: "{{ bird__asn.aurore }}"
|
|
remote:
|
|
address:
|
|
- 2a09:6840:203::1:1
|
|
- 10.203.1.1
|
|
as: "{{ bird__asn.aurore }}"
|
|
import:
|
|
- accept: true
|
|
export:
|
|
- accept: false
|
|
edge2:
|
|
local:
|
|
address: "{{ bird__bgp_addresses[inventory_hostname] }}"
|
|
as: "{{ bird__asn.aurore }}"
|
|
remote:
|
|
address:
|
|
- 2a09:6840:203::1:2
|
|
- 10.203.1.2
|
|
as: "{{ bird__asn.aurore }}"
|
|
import:
|
|
- accept: true
|
|
export:
|
|
- accept: false
|
|
bird__ospf_broadcast_interfaces:
|
|
back0: null
|
|
bird__ospf_stub_interfaces:
|
|
- wg0
|
|
roles:
|
|
- bird
|
|
...
|