diff options
author | Silvio Rhatto <rhatto@riseup.net> | 2022-01-08 15:50:26 -0300 |
---|---|---|
committer | Silvio Rhatto <rhatto@riseup.net> | 2022-01-08 15:50:26 -0300 |
commit | 3d1cf84f39fece3f2a9f8b7247a792212eb81177 (patch) | |
tree | f1fa5ca591908d363d13d30256f7af3b242d2d6b /manifests/shaping.pp | |
parent | 55fa862bae8e2582e5ac0c008a0bb0ec53d9bfff (diff) | |
download | puppet-firewall-3d1cf84f39fece3f2a9f8b7247a792212eb81177.tar.gz puppet-firewall-3d1cf84f39fece3f2a9f8b7247a792212eb81177.tar.bz2 |
Feat: major refactor
Diffstat (limited to 'manifests/shaping.pp')
-rw-r--r-- | manifests/shaping.pp | 44 |
1 files changed, 5 insertions, 39 deletions
diff --git a/manifests/shaping.pp b/manifests/shaping.pp index 277f82c..83558e9 100644 --- a/manifests/shaping.pp +++ b/manifests/shaping.pp @@ -1,46 +1,12 @@ class firewall::shaping( + $implementation = lookup('firewall::implementation', undef, undef, 'shorewall'), $device = lookup('firewall::device', undef, undef, 'eth0'), $in_bandwidth = lookup('firewall::in_bandwidth', undef, undef, '1000mbps'), $out_bandwidth = lookup('firewall::out_bandwidth', undef, undef, '1000mbps') ) { - # - # Traffic shaping - # - shorewall::tcdevices { "${device}": - in_bandwidth => "$in_bandwidth", - out_bandwidth => "$out_bandwidth", - } - - shorewall::tcrules { "ssh-tcp": - order => "1", - source => "0.0.0.0/0", - destination => "0.0.0.0/0", - protocol => "tcp", - ports => "22", - } - - shorewall::tcrules { "ssh-udp": - order => "1", - source => "0.0.0.0/0", - destination => "0.0.0.0/0", - protocol => "udp", - ports => "22", - } - - shorewall::tcclasses { "ssh": - order => "1", - interface => "${device}", - rate => "4*full/100", - ceil => "full", - priority => "1", - } - - shorewall::tcclasses { "default": - order => "2", - interface => "${device}", - rate => "6*full/100", - ceil => "full", - priority => "2", - options => "default", + class { "firewall::implementations::${implementation}::shaping": + device => $device, + in_bandwidth => $in_bandwidth, + out_bandwidth => $out_bandwidth, } } |