root / manifests / bridges.pp @ b46c9ce9
Historique | Voir | Annoter | Télécharger (594 octets)
| 1 | fd0eaeca | tr | # allow forwarding traffic on bridges |
|---|---|---|---|
| 2 | 11bf7237 | Steve Traylen | class nftables::bridges ( |
| 3 | 31b17627 | Steve Traylen | Enum['present','absent'] $ensure = 'present', |
| 4 | Regexp $bridgenames = /^br.+/ |
||
| 5 | fd0eaeca | tr | ) {
|
| 6 | if $ensure == 'present' {
|
||
| 7 | $interfaces = keys($facts['networking']['interfaces']) |
||
| 8 | $bridges = $interfaces.filter |$items| { $items =~ $bridgenames }
|
||
| 9 | |||
| 10 | $bridges.each |String $bridge| {
|
||
| 11 | 2c00d766 | tr | $bridge_rulename = regsubst($bridge, '-', '_', 'G') |
| 12 | nftables::rule { "default_fwd-bridge_${bridge_rulename}_${bridge_rulename}":
|
||
| 13 | fd0eaeca | tr | order => '08', |
| 14 | content => "iifname ${bridge} oifname ${bridge} accept",
|
||
| 15 | } |
||
| 16 | } |
||
| 17 | } |
||
| 18 | } |