GRE FFRL

exit_node.yml

@@ -0,0 +1,6 @@
+---
+- hosts: gw01.babel.md.freifunk.net:
+  become: yes
+
+  roles:
+    - role: network-ffrl 

roles/network-ffrl/README.md

@@ -0,0 +1,34 @@
+# Ansible role network-ffrl
+
+Diese Ansible role konfiguriert die GRE-Tunnel Interfaces, die für den Internet-Exit über Freifunk Rheinland benötigt werden.
+
+## Benötigte Variablen
+- Dictionary `ffrl_exit_server` (Host Variable)
+
+```
+ffrl_exit_server:
+  ffrl-a-ak-ber:
+    public_ipv4_address: 185.66.195.0
+    tunnel_ipv4_network: # IPv4 Tunnel Transfernetz
+    tunnel_ipv6_network: # IPv6 Tunnel Transfernetz
+  ffrl-b-ak-ber:
+    public_ipv4_address: 185.66.195.1
+    tunnel_ipv4_network:
+    tunnel_ipv6_network:
+  ffrl-a-ix-dus:
+    public_ipv4_address: 185.66.193.0
+    tunnel_ipv4_network:
+    tunnel_ipv6_network:
+  ffrl-b-ix-dus:
+    public_ipv4_address: 185.66.193.1
+    tunnel_ipv4_network:
+    tunnel_ipv6_network:
+  ffrl-a-fra2-fra:
+    public_ipv4_address: 185.66.194.0
+    tunnel_ipv4_network:
+    tunnel_ipv6_network:
+  ffrl-b-fra2-fra:
+    public_ipv4_address: 185.66.194.1
+    tunnel_ipv4_network:
+    tunnel_ipv6_network:
+```

roles/network-ffrl/handlers/main.yml

@@ -0,0 +1,5 @@
+---
+- name: reload network interfaces
+  systemd:
+    name: networking
+    state: reloaded

roles/network-ffrl/tasks/main.yml

@@ -0,0 +1,16 @@
+---
+- name: create ffrl interfaces
+  template:
+    src: ffrl.j2
+    dest: "/etc/network/interfaces.d/{{ item.key }}"
+  notify: reload network interfaces
+  loop: "{{ ffrl_exit_server | dict2items }}"
+
+- name: create ffrl-nat dummy interface
+  template:
+    src: ffrl_nat.j2
+    dest: "/etc/network/interfaces.d/ffrl-nat"
+  notify: reload network interfaces
+
+- name: flush handlers
+  meta: flush_handlers

roles/network-ffrl/templates/ffrl.j2

@@ -0,0 +1,17 @@
+#
+# {{ ansible_managed }}
+#
+auto {{ item.key }}
+iface {{ item.key }} inet tunnel
+    mode gre
+    local {{ ansible_default_ipv4.address | ipaddr('public') | ipaddr('address') }}
+    endpoint {{ item.value.public_ipv4_address | ipaddr('public') | ipaddr('address') }}
+
+    ttl 64
+    mtu 1400
+    tunnel-physdev {{ ansible_default_ipv4.interface }}
+    ip-forward on
+    ip6-forward on
+
+    address {{ item.value.tunnel_ipv4_network | ipaddr('net') | ipaddr('1') | ipaddr('ip/prefix') }}
+    address {{ item.value.tunnel_ipv6_network | ipaddr('net') | ipaddr('2') | ipaddr('ip/prefix') }}

roles/network-ffrl/templates/ffrl_nat.j2

@@ -0,0 +1,7 @@
+#
+# {{ ansible_managed }}
+#
+auto ffrl-nat
+iface ffrl-nat
+    link-type dummy
+    address {{ ffrl_public_ipv4_nat | ipaddr('host') }}