implr
90cf314d1e
bgpwtf: cloudflare: remove password
...
Seems like they aren't actually setting it on their end.
Change-Id: Ia751cd1560196ae44be15f759681dd9d679370da
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1485
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-04-01 16:57:18 +00:00
implr
26a7f5bb56
bgpwtf: peer with cloudflare
...
Change-Id: I00d040d56610b965d03d5af5cf7f17a5ea7f7b2d
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1484
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-03-28 17:12:52 +00:00
q3k
0d22d0bcb6
bgpwtf/m/edge01: allow 10.10.32.0/24 (dcr03 mgmt)
...
Change-Id: Ide36e7fbcb39c178b0d51dd0da8534c6bf60954b
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1403
Reviewed-by: patryk <patryk@hackerspace.pl>
2022-10-08 18:12:21 +00:00
q3k
e1aa63c7dd
bgpwtf: add rsh tests, fix startup sequencing
...
Change-Id: Idba53905d3965db6f805221da3e48548d7a01811
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1340
Reviewed-by: implr <implr@hackerspace.pl>
2022-07-07 23:51:57 +00:00
q3k
82fc1318e2
bgpwtf: edge01: repurpose wireguard tunnel for fmt
...
Change-Id: Ib36048a83641b62210ad0d63b7b7ecda999da542
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1201
Reviewed-by: q3k <q3k@hackerspace.pl>
2021-12-13 22:30:46 +00:00
q3k
767f031898
bgpwtf: fix edge01 DNS blackholing
...
The grapevine says that people were being fined for not supporting a
punycode domain. This was broken in rsh-unbound, so I had to fix it. I
then also realized we never were reloading unbound, so some changes
might've been slow to propagate.
Change-Id: Ie461a2ba27b5f447654a70f56bd73d3732b256ee
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1180
Reviewed-by: q3k <q3k@hackerspace.pl>
2021-12-08 14:12:07 +00:00
q3k
a5b0c13228
edge01: deploy kkc wireguard tunnel (never used)
...
Change-Id: I5f61f00029ac9e86cd4fdcc390d16ec7fa081f51
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1157
Reviewed-by: q3k <q3k@hackerspace.pl>
2021-10-07 18:50:51 +00:00
q3k
81e7fbaadd
bgpwtf: edge01: fix ipv4 static routing for customers
...
Change-Id: I9c34d12a7947c9bb25331e38ea7ee03beede7e47
2021-09-08 23:40:29 +02:00
q3k
11248d88ab
bgpwtf: edge01: add new client networks, remove old q3k network, limit nscd
...
Batch of small changes. Already deployed.
Change-Id: Ieb4f418699f497c7013e617fd7d1827e71a7a415
2021-09-06 12:07:42 +00:00
q3k
400e03fe00
bgpwtf/machines: allow new customer prefix from hscloud/dcr01sw37
...
Change-Id: Ieb742d3256aa6dd0c1bb28c298f3d2c41b093712
2021-07-21 14:56:29 +00:00
q3k
65d4bc5bff
Merge "bgpwtf: add q3k's anycast subnet"
2021-07-10 13:55:29 +00:00
q3k
1c80bd7563
bgpwtf: allow route with ptp to dcr03sw48
...
Change-Id: Ia1173deec1cd3bfc00d543c112df06b7b82dfad0
2021-06-30 21:23:24 +00:00
q3k
520f150134
bgpwtf: add q3k's anycast subnet
...
Change-Id: I66d449c94b27b741e71da047bb1901b8fba6eb80
2021-06-18 21:24:15 +02:00
implr
c726798ef7
edge01: systemd unit for running RIPE Atlas anchor VM
...
Change-Id: I5d91c3b3075c404af92d40f33a48a487b84ec7a5
2020-12-15 07:05:12 +01:00
q3k
e9f2c9d21b
bgpwtf: widen hswaw prefix
...
Change-Id: I6bf97db741af6cfb788a0e69227ea9e616afea15
2020-11-08 16:31:11 +01:00
q3k
d9a6365f8b
bgpwtf: add static v6 routes via bird
...
A customer was missing a static v6 route via their router. Since we
don't want to add them to networking.interfaces.routes.* (as this
restarts the whole scripted network stack in NixOS), we add them to
bird. This requires implementing hscloud.routing.static.
Change-Id: I0a205ed1e1f17a86de43aaf72ab6c2694a069112
2020-10-16 19:07:52 +02:00
q3k
6abe4fa771
bgpwtf/machines: init edge01.waw
...
This configures our WAW edge router using NixOS. This replaces our
previous Ubuntu installation.
Change-Id: Ibd72bde66ec413164401da407c5b268ad83fd3af
2020-10-03 14:57:38 +00:00
implr
q3k