root / manifests / bridges.pp @ 11bf7237
Historique | Voir | Annoter | Télécharger (598 octets)
| 1 | fd0eaeca | tr | # allow forwarding traffic on bridges |
|---|---|---|---|
| 2 | 11bf7237 | Steve Traylen | class nftables::bridges ( |
| 3 | fd0eaeca | tr | Enum['present','absent'] |
| 4 | 11bf7237 | Steve Traylen | $ensure = 'present', |
| 5 | fd0eaeca | tr | Regexp |
| 6 | 11bf7237 | Steve Traylen | $bridgenames = /^br.+/ |
| 7 | fd0eaeca | tr | ) {
|
| 8 | if $ensure == 'present' {
|
||
| 9 | $interfaces = keys($facts['networking']['interfaces']) |
||
| 10 | $bridges = $interfaces.filter |$items| { $items =~ $bridgenames }
|
||
| 11 | |||
| 12 | $bridges.each |String $bridge| {
|
||
| 13 | 2c00d766 | tr | $bridge_rulename = regsubst($bridge, '-', '_', 'G') |
| 14 | nftables::rule { "default_fwd-bridge_${bridge_rulename}_${bridge_rulename}":
|
||
| 15 | fd0eaeca | tr | order => '08', |
| 16 | content => "iifname ${bridge} oifname ${bridge} accept",
|
||
| 17 | } |
||
| 18 | } |
||
| 19 | } |
||
| 20 | } |