Dave Walter
f5fc1e275b
Remove vip network from openvpn.yml manifest
...
[#164386432 ](https://www.pivotaltracker.com/story/show/164386432 )
Co-authored-by: Paul Warren <paul.warren@emc.com>
2019-03-13 11:15:08 -07:00
Dave Walter
22bbb22407
Update openvpn.yml to reference latest release
...
[#164386432 ](https://www.pivotaltracker.com/story/show/164386432 )
Co-authored-by: Paul Warren <paul.warren@emc.com>
2019-03-13 11:14:14 -07:00
Dave Walter
0efc9b810e
New ops-file to allow multiple concurrent client connections
...
- useful for Diego cells
[#164386432 ](https://www.pivotaltracker.com/story/show/164386432 )
Co-authored-by: Paul Warren <paul.warren@emc.com>
2019-03-12 10:47:36 -07:00
Dave Walter
0d40e44952
New ops-file to enable masquerading VPN traffic on the LAN
...
[#164386432 ](https://www.pivotaltracker.com/story/show/164386432 )
Co-authored-by: Paul Warren <paul.warren@emc.com>
2019-03-12 10:47:36 -07:00
Dave Walter
6e2d972caa
Use the latest openvpn-bosh-release version
...
- update the key_usage block for the server cert to allow mutual TLS
authentication
[#164386432 ](https://www.pivotaltracker.com/story/show/164386432 )
Co-authored-by: Paul Warren <paul.warren@emc.com>
2019-03-12 10:47:36 -07:00
Dave Walter
3174e25a0d
Update manifest to BOSH v2 format
...
[#164386432 ](https://www.pivotaltracker.com/story/show/164386432 )
Co-authored-by: Paul Warren <paul.warren@emc.com>
2019-03-12 10:47:36 -07:00
the early evening
e2907e4291
Proper iptables config properties
...
per https://bosh.io/jobs/iptables?source=github.com/cloudfoundry/networking-release&version=9 , the `networking-release/iptables` job requires the `iptables` property, rather than the `nat` property directly. You can see this working when you do `iptables -t nat --list` on the subject VM.
2018-11-14 13:48:58 -08:00
Danny Berger
79791e2bd6
Update google stemcell to 3468.1
2017-10-30 17:35:36 -07:00
Danny Berger
7029b4c7b7
Switch compiled release to 3468.1
2017-10-30 17:33:49 -07:00
Chris Dutra
9ac5b84441
mbus_cert does not generate ca with alternative_names
2017-10-30 15:58:39 -07:00
Chris Dutra
acb9d536dc
Update aws-cpi-release and stemcell
2017-10-30 15:44:58 -07:00
Chris Dutra
b8e4537cfd
Use release version 4.1.0 in deployments
2017-10-30 14:19:45 -07:00
Danny Berger
84ca960de0
Add with-lan-access.yml deployment ops example
2017-07-20 22:10:26 -07:00
Danny Berger
c38d248ca5
Rename deployment var lan_cidr -> lan_network/lan_network_mask_bits for consistency
2017-07-20 22:03:03 -07:00
Chris Dutra
0033911a28
Fix push routes ops file
...
- update stemcell
- update openvpn release version
- fix docs: default protocol is tcp, not udp
2017-07-19 17:33:20 -07:00
Danny Berger
3c0fc6a359
Update docs
2017-06-26 22:38:44 -07:00
Danny Berger
f84637a0ba
Revert defaulting to UDP
...
UDP offers better performance, but at the marginal cost of reliability.
Continue to default for reliability; user can change it if they really want to.
2017-06-26 21:30:24 -07:00
Danny Berger
fdbc48c0a6
Add standalone deployment manifests (still needs testing)
2017-06-25 23:08:55 -07:00