root / manifests / bridges.pp @ 19908f41
Historique | Voir | Annoter | Télécharger (653 octets)
| 1 | fd0eaeca | tr | # allow forwarding traffic on bridges |
|---|---|---|---|
| 2 | 11bf7237 | Steve Traylen | class nftables::bridges ( |
| 3 | 09cba182 | Steve Traylen | # lint:ignore:parameter_documentation |
| 4 | 31b17627 | Steve Traylen | Enum['present','absent'] $ensure = 'present', |
| 5 | Regexp $bridgenames = /^br.+/ |
||
| 6 | 09cba182 | Steve Traylen | # lint:endignore |
| 7 | fd0eaeca | tr | ) {
|
| 8 | if $ensure == 'present' {
|
||
| 9 | $interfaces = keys($facts['networking']['interfaces']) |
||
| 10 | $bridges = $interfaces.filter |$items| { $items =~ $bridgenames }
|
||
| 11 | |||
| 12 | $bridges.each |String $bridge| {
|
||
| 13 | 2c00d766 | tr | $bridge_rulename = regsubst($bridge, '-', '_', 'G') |
| 14 | nftables::rule { "default_fwd-bridge_${bridge_rulename}_${bridge_rulename}":
|
||
| 15 | fd0eaeca | tr | order => '08', |
| 16 | content => "iifname ${bridge} oifname ${bridge} accept",
|
||
| 17 | } |
||
| 18 | } |
||
| 19 | } |
||
| 20 | } |