Skip to content

Commit

Permalink
Initial commit:
Browse files Browse the repository at this point in the history 
* ifcfg files for ovs trunk and VLAN
* direct.xml firewalld config
* libvirt netoworks
  • Loading branch information
@hjensas
hjensas committed Jan 19, 2017
0 parents commit 51bcfd2
Show file tree
Hide file tree
Showing 26 changed files with 430 additions and 0 deletions.
98 changes: 98 additions & 0 deletions etc/firewalld/direct.xml
Original file line number Diff line number Diff line change
@@ -0,0 +1,98 @@
<?xml version="1.0" encoding="utf-8"?>
<direct>
[ <rule ipv="ipv4" table="filter" chain="FORWARD" priority="0"> -i virbr0 -j ACCEPT </rule> ]
[ <rule ipv="ipv4" table="filter" chain="FORWARD" priority="0"> -i osp9management -j ACCEPT </rule> ]
[ <rule ipv="ipv4" table="filter" chain="FORWARD" priority="0"> -i osp9provision -j ACCEPT </rule> ]
[ <rule ipv="ipv4" table="filter" chain="FORWARD" priority="0"> -i osp9external -j ACCEPT </rule> ]
[ <rule ipv="ipv4" table="filter" chain="FORWARD" priority="0"> -i osp9storage -j ACCEPT </rule> ]

[ <rule ipv="ipv4" table="filter" chain="FORWARD" priority="0"> -i ooomanagement -j ACCEPT </rule> ]
[ <rule ipv="ipv4" table="filter" chain="FORWARD" priority="0"> -i oooprovision -j ACCEPT </rule> ]
[ <rule ipv="ipv4" table="filter" chain="FORWARD" priority="0"> -i oooexternal -j ACCEPT </rule> ]
[ <rule ipv="ipv4" table="filter" chain="FORWARD" priority="0"> -i ooostorage -j ACCEPT </rule> ]

[ <rule ipv="ipv4" table="filter" chain="FORWARD" priority="0"> -i osp8provision -j ACCEPT </rule> ]
[ <rule ipv="ipv4" table="filter" chain="FORWARD" priority="0"> -i osp7provision -j ACCEPT </rule> ]

[ <rule ipv="ipv4" table="filter" chain="INPUT" priority="0"> -i osp7provision -p udp -m udp --dport 53 -j ACCEPT </rule> ]
[ <rule ipv="ipv4" table="filter" chain="INPUT" priority="0"> -i osp7provision -p tcp -m tcp --dport 53 -j ACCEPT </rule> ]
[ <rule ipv="ipv4" table="filter" chain="INPUT" priority="0"> -i osp8provision -p udp -m udp --dport 53 -j ACCEPT </rule> ]
[ <rule ipv="ipv4" table="filter" chain="INPUT" priority="0"> -i osp8provision -p tcp -m tcp --dport 53 -j ACCEPT </rule> ]
[ <rule ipv="ipv4" table="filter" chain="INPUT" priority="0"> -i osp9provision -p udp -m udp --dport 53 -j ACCEPT </rule> ]
[ <rule ipv="ipv4" table="filter" chain="INPUT" priority="0"> -i osp9provision -p tcp -m tcp --dport 53 -j ACCEPT </rule> ]

[ <rule ipv="ipv4" table="filter" chain="INPUT" priority="0"> -i osp9management -p udp -m udp --dport 53 -j ACCEPT </rule> ]
[ <rule ipv="ipv4" table="filter" chain="INPUT" priority="0"> -i osp9management -p tcp -m tcp --dport 53 -j ACCEPT </rule> ]
[ <rule ipv="ipv4" table="filter" chain="INPUT" priority="0"> -i osp9storage -p udp -m udp --dport 67 -j ACCEPT </rule> ]
[ <rule ipv="ipv4" table="filter" chain="INPUT" priority="0"> -i osp9storage -p udp -m udp --dport 68 -j ACCEPT </rule> ]

[ <rule ipv="ipv4" table="filter" chain="INPUT" priority="0"> -i oooprovision -p udp -m udp --dport 53 -j ACCEPT </rule> ]
[ <rule ipv="ipv4" table="filter" chain="INPUT" priority="0"> -i oooprovision -p tcp -m tcp --dport 53 -j ACCEPT </rule> ]
[ <rule ipv="ipv4" table="filter" chain="INPUT" priority="0"> -i ooomanagement -p udp -m udp --dport 53 -j ACCEPT </rule> ]
[ <rule ipv="ipv4" table="filter" chain="INPUT" priority="0"> -i ooomanagement -p tcp -m tcp --dport 53 -j ACCEPT </rule> ]

[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -s 172.16.100.0/24 -d base-address.mcast.net/24 -j RETURN </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -s 172.16.100.0/24 -d 255.255.255.255 -j RETURN </rule> ]

[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -s 172.16.101.0/24 -d base-address.mcast.net/24 -j RETURN </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -s 172.16.101.0/24 -d 255.255.255.255 -j RETURN </rule> ]

[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -s 172.16.103.0/24 -d base-address.mcast.net/24 -j RETURN </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -s 172.16.103.0/24 -d 255.255.255.255 -j RETURN </rule> ]

[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -s 172.16.200.0/24 -d base-address.mcast.net/24 -j RETURN </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -s 172.16.200.0/24 -d 255.255.255.255 -j RETURN </rule> ]

[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -s 172.16.201.0/24 -d base-address.mcast.net/24 -j RETURN </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -s 172.16.201.0/24 -d 255.255.255.255 -j RETURN </rule> ]

[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -s 172.16.203.0/24 -d base-address.mcast.net/24 -j RETURN </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -s 172.16.203.0/24 -d 255.255.255.255 -j RETURN </rule> ]

[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -s 192.168.122.0/24 -d base-address.mcast.net/24 -j RETURN </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -s 192.168.122.0/24 -d 255.255.255.255 -j RETURN </rule> ]

[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -s 172.17.0.0/24 -d base-address.mcast.net/24 -j RETURN </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -s 172.17.0.0/24 -d 255.255.255.255 -j RETURN </rule> ]

[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -s 172.18.0.0/24 -d base-address.mcast.net/24 -j RETURN </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -s 172.18.0.0/24 -d 255.255.255.255 -j RETURN </rule> ]

[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -p tcp ! -d 172.16.100.0/24 -j MASQUERADE --to-ports 1024-65535 </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -p udp ! -d 172.16.100.0/24 -j MASQUERADE --to-ports 1024-65535 </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> ! -d 172.16.100.0/24 -j MASQUERADE </rule> ]

[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -p tcp ! -d 172.16.103.0/24 -j MASQUERADE --to-ports 1024-65535 </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -p udp ! -d 172.16.103.0/24 -j MASQUERADE --to-ports 1024-65535 </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> ! -d 172.16.103.0/24 -j MASQUERADE </rule> ]

[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -p tcp ! -d 172.16.101.0/24 -j MASQUERADE --to-ports 1024-65535 </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -p udp ! -d 172.16.101.0/24 -j MASQUERADE --to-ports 1024-65535 </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> ! -d 172.16.101.0/24 -j MASQUERADE </rule> ]

[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -p tcp ! -d 172.16.200.0/24 -j MASQUERADE --to-ports 1024-65535 </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -p udp ! -d 172.16.200.0/24 -j MASQUERADE --to-ports 1024-65535 </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> ! -d 172.16.200.0/24 -j MASQUERADE </rule> ]

[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -p tcp ! -d 172.16.203.0/24 -j MASQUERADE --to-ports 1024-65535 </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -p udp ! -d 172.16.203.0/24 -j MASQUERADE --to-ports 1024-65535 </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> ! -d 172.16.103.0/24 -j MASQUERADE </rule> ]

[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -p tcp ! -d 172.16.201.0/24 -j MASQUERADE --to-ports 1024-65535 </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -p udp ! -d 172.16.201.0/24 -j MASQUERADE --to-ports 1024-65535 </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> ! -d 172.16.101.0/24 -j MASQUERADE </rule> ]

[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -p tcp ! -d 192.168.122.0/24 -j MASQUERADE --to-ports 1024-65535 </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -p udp ! -d 192.168.122.0/24 -j MASQUERADE --to-ports 1024-65535 </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> ! -d 192.168.122.0/24 -j MASQUERADE </rule> ]

[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -p tcp ! -d 172.17.0.0/24 -j MASQUERADE --to-ports 1024-65535 </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -p udp ! -d 172.17.0.0/24 -j MASQUERADE --to-ports 1024-65535 </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> ! -d 172.17.0.0/24 -j MASQUERADE </rule> ]

[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -p tcp ! -d 172.18.0.0/24 -j MASQUERADE --to-ports 1024-65535 </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> -p udp ! -d 172.18.0.0/24 -j MASQUERADE --to-ports 1024-65535 </rule> ]
[ <rule ipv="ipv4" table="nat" chain="POSTROUTING" priority="0"> ! -d 172.18.0.0/24 -j MASQUERADE </rule> ]

</direct>

7 changes: 7 additions & 0 deletions etc/sysconfig/network-scripts/ifcfg-br-oootrunk
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
DEVICE=br-oootrunk
ONBOOT=yes
DEVICETYPE=ovs
TYPE=OVSBridge
HOTPLUG=no
BOOTPROTO=none

7 changes: 7 additions & 0 deletions etc/sysconfig/network-scripts/ifcfg-br-osp7trunk
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
DEVICE=br-osp7trunk
ONBOOT=yes
DEVICETYPE=ovs
TYPE=OVSBridge
HOTPLUG=no
BOOTPROTO=none

7 changes: 7 additions & 0 deletions etc/sysconfig/network-scripts/ifcfg-br-osp8trunk
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
DEVICE=br-osp8trunk
ONBOOT=yes
DEVICETYPE=ovs
TYPE=OVSBridge
HOTPLUG=no
BOOTPROTO=none

7 changes: 7 additions & 0 deletions etc/sysconfig/network-scripts/ifcfg-br-osp9trunk
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
DEVICE=br-osp9trunk
ONBOOT=yes
DEVICETYPE=ovs
TYPE=OVSBridge
HOTPLUG=no
BOOTPROTO=none

12 changes: 12 additions & 0 deletions etc/sysconfig/network-scripts/ifcfg-osp7external
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
NAME=osp7external
DEVICE=osp7external
ONBOOT=yes
DEVICETYPE=ovs
TYPE=OVSIntPort
OVS_BRIDGE=br-osp7trunk
IPV6INIT=no
BOOTPROTO=static
IPADDR=172.18.1.254
PREFIX=24
OVS_OPTIONS="tag=401"

12 changes: 12 additions & 0 deletions etc/sysconfig/network-scripts/ifcfg-osp7floating
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
NAME=osp7floating
DEVICE=osp7floating
ONBOOT=yes
DEVICETYPE=ovs
TYPE=OVSIntPort
OVS_BRIDGE=br-osp7trunk
IPV6INIT=no
BOOTPROTO=static
IPADDR=172.18.2.254
PREFIX=24
OVS_OPTIONS="tag=402"

11 changes: 11 additions & 0 deletions etc/sysconfig/network-scripts/ifcfg-osp7provisioning
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
NAME=osp7provision
DEVICE=osp7provision
ONBOOT=yes
DEVICETYPE=ovs
TYPE=OVSIntPort
OVS_BRIDGE=br-osp7trunk
IPV6INIT=no
BOOTPROTO=static
IPADDR=172.18.0.254
PREFIX=24
OVS_OPTIONS="tag=400"
12 changes: 12 additions & 0 deletions etc/sysconfig/network-scripts/ifcfg-osp7storage
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
NAME=osp7storage
DEVICE=osp7storage
ONBOOT=yes
DEVICETYPE=ovs
TYPE=OVSIntPort
OVS_BRIDGE=br-osp7trunk
IPV6INIT=no
BOOTPROTO=static
IPADDR=172.18.6.254
PREFIX=24
OVS_OPTIONS="tag=406"

12 changes: 12 additions & 0 deletions etc/sysconfig/network-scripts/ifcfg-osp7storagemgmt
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
NAME=osp7storagemgmt
DEVICE=osp7storagemgmt
ONBOOT=yes
DEVICETYPE=ovs
TYPE=OVSIntPort
OVS_BRIDGE=br-osp7trunk
IPV6INIT=no
BOOTPROTO=static
IPADDR=172.18.7.254
PREFIX=24
OVS_OPTIONS="tag=407"

12 changes: 12 additions & 0 deletions etc/sysconfig/network-scripts/ifcfg-osp8external
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
NAME=osp8external
DEVICE=osp8external
ONBOOT=yes
DEVICETYPE=ovs
TYPE=OVSIntPort
OVS_BRIDGE=br-osp8trunk
IPV6INIT=no
BOOTPROTO=static
IPADDR=172.17.1.254
PREFIX=24
OVS_OPTIONS="tag=301"

12 changes: 12 additions & 0 deletions etc/sysconfig/network-scripts/ifcfg-osp8floating
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
NAME=osp8floating
DEVICE=osp8floating
ONBOOT=yes
DEVICETYPE=ovs
TYPE=OVSIntPort
OVS_BRIDGE=br-osp8trunk
IPV6INIT=no
BOOTPROTO=static
IPADDR=172.17.2.254
PREFIX=24
OVS_OPTIONS="tag=302"

12 changes: 12 additions & 0 deletions etc/sysconfig/network-scripts/ifcfg-osp8managment
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
NAME=osp8management
DEVICE=osp8management
ONBOOT=yes
DEVICETYPE=ovs
TYPE=OVSIntPort
OVS_BRIDGE=br-osp8trunk
IPV6INIT=no
BOOTPROTO=static
IPADDR=172.17.3.254
PREFIX=24
OVS_OPTIONS="tag=303"

11 changes: 11 additions & 0 deletions etc/sysconfig/network-scripts/ifcfg-osp8provisioning
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
NAME=osp8provision
DEVICE=osp8provision
ONBOOT=yes
DEVICETYPE=ovs
TYPE=OVSIntPort
OVS_BRIDGE=br-osp8trunk
IPV6INIT=no
BOOTPROTO=static
IPADDR=172.17.0.254
PREFIX=24
OVS_OPTIONS="tag=300"
12 changes: 12 additions & 0 deletions etc/sysconfig/network-scripts/ifcfg-osp8storage
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
NAME=osp8storage
DEVICE=osp8storage
ONBOOT=yes
DEVICETYPE=ovs
TYPE=OVSIntPort
OVS_BRIDGE=br-osp8trunk
IPV6INIT=no
BOOTPROTO=static
IPADDR=172.17.6.254
PREFIX=24
OVS_OPTIONS="tag=306"

12 changes: 12 additions & 0 deletions etc/sysconfig/network-scripts/ifcfg-osp8storagemgmt
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
NAME=osp8storagemgmt
DEVICE=osp8storagemgmt
ONBOOT=yes
DEVICETYPE=ovs
TYPE=OVSIntPort
OVS_BRIDGE=br-osp8trunk
IPV6INIT=no
BOOTPROTO=static
IPADDR=172.17.7.254
PREFIX=24
OVS_OPTIONS="tag=307"

12 changes: 12 additions & 0 deletions etc/sysconfig/network-scripts/ifcfg-osp9external
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
NAME=osp9external
DEVICE=osp9external
ONBOOT=yes
DEVICETYPE=ovs
TYPE=OVSIntPort
OVS_BRIDGE=br-osp9trunk
IPV6INIT=no
BOOTPROTO=static
IPADDR=172.16.101.254
PREFIX=24
OVS_OPTIONS="tag=101"

12 changes: 12 additions & 0 deletions etc/sysconfig/network-scripts/ifcfg-osp9floating
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
NAME=osp9floating
DEVICE=osp9floating
ONBOOT=yes
DEVICETYPE=ovs
TYPE=OVSIntPort
OVS_BRIDGE=br-osp9trunk
IPV6INIT=no
BOOTPROTO=static
IPADDR=172.16.102.254
PREFIX=24
OVS_OPTIONS="tag=102"

12 changes: 12 additions & 0 deletions etc/sysconfig/network-scripts/ifcfg-osp9management
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
NAME=osp9management
DEVICE=osp9management
ONBOOT=yes
DEVICETYPE=ovs
TYPE=OVSIntPort
OVS_BRIDGE=br-osp9trunk
IPV6INIT=no
BOOTPROTO=static
IPADDR=172.16.103.254
PREFIX=24
OVS_OPTIONS="tag=103"

11 changes: 11 additions & 0 deletions etc/sysconfig/network-scripts/ifcfg-osp9provision
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
NAME=osp9provision
DEVICE=osp9provision
ONBOOT=yes
DEVICETYPE=ovs
TYPE=OVSIntPort
OVS_BRIDGE=br-osp9trunk
IPV6INIT=no
BOOTPROTO=static
IPADDR=172.16.100.254
PREFIX=24
OVS_OPTIONS="tag=100"
12 changes: 12 additions & 0 deletions etc/sysconfig/network-scripts/ifcfg-osp9storage
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
NAME=osp9storage
DEVICE=osp9storage
ONBOOT=yes
DEVICETYPE=ovs
TYPE=OVSIntPort
OVS_BRIDGE=br-osp9trunk
IPV6INIT=no
BOOTPROTO=static
IPADDR=172.16.106.254
PREFIX=24
OVS_OPTIONS="tag=106"

12 changes: 12 additions & 0 deletions etc/sysconfig/network-scripts/ifcfg-osp9storagemgmt
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
NAME=osp9storagemgmt
DEVICE=osp9storagemgmt
ONBOOT=yes
DEVICETYPE=ovs
TYPE=OVSIntPort
OVS_BRIDGE=br-osp9trunk
IPV6INIT=no
BOOTPROTO=static
IPADDR=172.16.107.254
PREFIX=24
OVS_OPTIONS="tag=107"

27 changes: 27 additions & 0 deletions ooo-network.xml
Original file line number Diff line number Diff line change
@@ -0,0 +1,27 @@
<network>
<name>ooo-network</name>
<forward mode='bridge'/>
<bridge name='br-oootrunk'/>
<virtualport type='openvswitch'/>
<portgroup name='oooprovision'>
<vlan>
<tag id='200'/>
</vlan>
</portgroup>
<portgroup name='ooomanagement'>
<vlan>
<tag id='203'/>
</vlan>
</portgroup>
<portgroup name='oootrunk' default='yes'>
<vlan trunk='yes'>
<tag id='201'/>
<tag id='202'/>
<tag id='204'/>
<tag id='205'/>
<tag id='206'/>
<tag id='207'/>
</vlan>
</portgroup>
</network>

22 changes: 22 additions & 0 deletions osp7-network.xml
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
<network>
<name>osp7-network</name>
<forward mode='bridge'/>
<bridge name='br-osp7trunk'/>
<virtualport type='openvswitch'/>
<portgroup name='osp7provision'>
<vlan>
<tag id='400'/>
</vlan>
</portgroup>
<portgroup name='osp7trunk' default='yes'>
<vlan trunk='yes'>
<tag id='401'/>
<tag id='402'/>
<tag id='404'/>
<tag id='405'/>
<tag id='406'/>
<tag id='407'/>
</vlan>
</portgroup>
</network>

Loading

0 comments on commit 51bcfd2

Please sign in to comment.