Add with-lan-access.yml deployment ops example
This commit is contained in:
parent
eb8ba81cd8
commit
84ca960de0
|
@ -0,0 +1,22 @@
|
|||
- path: /releases/name=networking?
|
||||
type: replace
|
||||
value:
|
||||
name: networking
|
||||
version: 9
|
||||
url: http://bosh.io/d/github.com/cloudfoundry/networking-release?v=9
|
||||
sha1: 9b5f9d27917c3754e492470ac6c9af80d62963db
|
||||
- path: /instance_groups/name=openvpn/jobs/name=iptables?
|
||||
type: replace
|
||||
value:
|
||||
name: iptables
|
||||
release: networking
|
||||
properties:
|
||||
iptables:
|
||||
filter:
|
||||
FORWARD:
|
||||
- -s ((vpn_network))/((vpn_network_mask_bits)) -d ((lan_network))/((lan_network_mask_bits)) -m conntrack --ctstate NEW -j ACCEPT -m comment --comment 'vpn -> lan'
|
||||
- -s ((lan_network))/((lan_network_mask_bits)) -d ((vpn_network))/((vpn_network_mask_bits)) -m conntrack --ctstate NEW -j ACCEPT -m comment --comment 'lan -> vpn'
|
||||
- -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||
- path: /instance_groups/name=openvpn/jobs/name=openvpn/properties/push_routes?/-
|
||||
type: replace
|
||||
value: ((lan_network)) ((lan_network_mask))
|
Loading…
Reference in New Issue