Page MenuHomeSoftware Heritage

staging infra: Setup gateway vm
Closed, MigratedEdits Locked

Description

when vlan is ready:

  • proxmox: Add new network interface to access new vlan + bridge
  • Add new gateway vm (firewall, proxy, router) with public ip address

else (when vlan not ready):

  • instantiate new vm (+ puppet)
  • make it route 192.168.128.0/24 paquet to louvre

Related Objects

Event Timeline

ardumont triaged this task as High priority.Jul 3 2019, 2:08 PM
ardumont created this task.
ardumont changed the task status from Open to Work in Progress.Jul 30 2019, 4:33 PM

louvre (as in vpn server and production gateway)

Make openvpn server push a new route to vpn clients, edit /etc/openvpn/louvre.conf:

push "route 192.168.128.0 255.255.255.0"

Restart vpn (notify people their client service might die).

root@louvre$ systemctl restart openvpn@louvre

Add route to the louvre gateway to forward traffic to the staging network:

root@louvre$ ip route add 192.168.128.0/24 via 192.168.100.125

Now to determine how to make that route persistent (edit /etc/network/interfaces for the right interface, i think)

Check it works

tony@myrkr% ssh root@192.168.128.1 'echo hello from $(hostname)'
hello from gateway
tony@myrkr% ssh root@192.168.128.2 'echo hello from $(hostname)'
hello from storage0

Note:

  • storage(128.2)/gateway(128.1) are nodes built from D1762
  • myrkr: vpn client machine

Document

https://intranet.softwareheritage.org/wiki/Network_configuration#192.168.128.1.2F24

Now to determine how to make that route persistent (edit /etc/network/interfaces for eth0, i think)

Added the post-up ip add route instruction in /etc/network/interfaces:

auto ens18
iface ens18 inet static
        address  192.168.100.1
        netmask  255.255.255.0
        post-up ip route add 192.168.128.0/24 via 192.168.100.125
ardumont mentioned this in Unknown Object (Paste).Aug 1 2019, 12:55 PM
ardumont claimed this task.