Commit Graph

18 Commits

Author SHA1 Message Date
Dave Walter f5fc1e275b Remove vip network from openvpn.yml manifest
[#164386432](https://www.pivotaltracker.com/story/show/164386432)

Co-authored-by: Paul Warren <paul.warren@emc.com>
2019-03-13 11:15:08 -07:00
Dave Walter 22bbb22407 Update openvpn.yml to reference latest release
[#164386432](https://www.pivotaltracker.com/story/show/164386432)

Co-authored-by: Paul Warren <paul.warren@emc.com>
2019-03-13 11:14:14 -07:00
Dave Walter 0efc9b810e New ops-file to allow multiple concurrent client connections
- useful for Diego cells

[#164386432](https://www.pivotaltracker.com/story/show/164386432)

Co-authored-by: Paul Warren <paul.warren@emc.com>
2019-03-12 10:47:36 -07:00
Dave Walter 0d40e44952 New ops-file to enable masquerading VPN traffic on the LAN
[#164386432](https://www.pivotaltracker.com/story/show/164386432)

Co-authored-by: Paul Warren <paul.warren@emc.com>
2019-03-12 10:47:36 -07:00
Dave Walter 6e2d972caa Use the latest openvpn-bosh-release version
- update the key_usage block for the server cert to allow mutual TLS
authentication

[#164386432](https://www.pivotaltracker.com/story/show/164386432)

Co-authored-by: Paul Warren <paul.warren@emc.com>
2019-03-12 10:47:36 -07:00
Dave Walter 3174e25a0d Update manifest to BOSH v2 format
[#164386432](https://www.pivotaltracker.com/story/show/164386432)

Co-authored-by: Paul Warren <paul.warren@emc.com>
2019-03-12 10:47:36 -07:00
the early evening e2907e4291
Proper iptables config properties
per https://bosh.io/jobs/iptables?source=github.com/cloudfoundry/networking-release&version=9 , the `networking-release/iptables` job requires the `iptables` property, rather than the `nat` property directly. You can see this working when you do `iptables -t nat --list` on the subject VM.
2018-11-14 13:48:58 -08:00
Danny Berger 79791e2bd6
Update google stemcell to 3468.1 2017-10-30 17:35:36 -07:00
Danny Berger 7029b4c7b7
Switch compiled release to 3468.1 2017-10-30 17:33:49 -07:00
Chris Dutra 9ac5b84441 mbus_cert does not generate ca with alternative_names 2017-10-30 15:58:39 -07:00
Chris Dutra acb9d536dc Update aws-cpi-release and stemcell 2017-10-30 15:44:58 -07:00
Chris Dutra b8e4537cfd Use release version 4.1.0 in deployments 2017-10-30 14:19:45 -07:00
Danny Berger 84ca960de0 Add with-lan-access.yml deployment ops example 2017-07-20 22:10:26 -07:00
Danny Berger c38d248ca5 Rename deployment var lan_cidr -> lan_network/lan_network_mask_bits for consistency 2017-07-20 22:03:03 -07:00
Chris Dutra 0033911a28 Fix push routes ops file
- update stemcell
- update openvpn release version
- fix docs: default protocol is tcp, not udp
2017-07-19 17:33:20 -07:00
Danny Berger 3c0fc6a359 Update docs 2017-06-26 22:38:44 -07:00
Danny Berger f84637a0ba Revert defaulting to UDP
UDP offers better performance, but at the marginal cost of reliability.
Continue to default for reliability; user can change it if they really want to.
2017-06-26 21:30:24 -07:00
Danny Berger fdbc48c0a6 Add standalone deployment manifests (still needs testing) 2017-06-25 23:08:55 -07:00