From 7b9c0b1f4df74bed07f36832f6f1be7b28f5de7c Mon Sep 17 00:00:00 2001 From: Timo Makinen Date: Wed, 17 Mar 2021 18:41:25 +0000 Subject: [PATCH] Add ifstated to fsol-gw hosts --- group_vars/fsol.yml | 3 ++- playbooks/fsol.yml | 1 + roles/ifstated/files/ifstated-fsol.conf | 20 ++++++++++++++++++++ 3 files changed, 23 insertions(+), 1 deletion(-) create mode 100644 roles/ifstated/files/ifstated-fsol.conf diff --git a/group_vars/fsol.yml b/group_vars/fsol.yml index dd70dd2..b46b721 100644 --- a/group_vars/fsol.yml +++ b/group_vars/fsol.yml @@ -8,5 +8,6 @@ network_carp_interfaces: advskew: 128 network_dns_servers: [172.20.20.10, 172.20.21.1, 172.20.21.2] -# use custom firewall config +# use custom firewall and ifstated config firewall_src: pf.conf.gw_fsol +ifstated_config: ifstated-fsol.conf diff --git a/playbooks/fsol.yml b/playbooks/fsol.yml index f98e6f5..71ff82e 100644 --- a/playbooks/fsol.yml +++ b/playbooks/fsol.yml @@ -37,3 +37,4 @@ - base - bird - openvpn + - ifstated diff --git a/roles/ifstated/files/ifstated-fsol.conf b/roles/ifstated/files/ifstated-fsol.conf new file mode 100644 index 0000000..4fc18b5 --- /dev/null +++ b/roles/ifstated/files/ifstated-fsol.conf @@ -0,0 +1,20 @@ +carp_up = "carp145.link.up" + +state backup { + init { + run "/usr/local/sbin/birdc disable ospf1" + } + if $carp_up { + set-state master + } +} + +state master { + init { + run "/usr/local/sbin/birdc enable ospf1" + } + if !$carp_up { + set-state backup + } +} +