diff options
Diffstat (limited to 'manifests/shaping.pp')
-rw-r--r-- | manifests/shaping.pp | 44 |
1 files changed, 5 insertions, 39 deletions
diff --git a/manifests/shaping.pp b/manifests/shaping.pp index 277f82c..83558e9 100644 --- a/manifests/shaping.pp +++ b/manifests/shaping.pp @@ -1,46 +1,12 @@ class firewall::shaping( + $implementation = lookup('firewall::implementation', undef, undef, 'shorewall'), $device = lookup('firewall::device', undef, undef, 'eth0'), $in_bandwidth = lookup('firewall::in_bandwidth', undef, undef, '1000mbps'), $out_bandwidth = lookup('firewall::out_bandwidth', undef, undef, '1000mbps') ) { - # - # Traffic shaping - # - shorewall::tcdevices { "${device}": - in_bandwidth => "$in_bandwidth", - out_bandwidth => "$out_bandwidth", - } - - shorewall::tcrules { "ssh-tcp": - order => "1", - source => "0.0.0.0/0", - destination => "0.0.0.0/0", - protocol => "tcp", - ports => "22", - } - - shorewall::tcrules { "ssh-udp": - order => "1", - source => "0.0.0.0/0", - destination => "0.0.0.0/0", - protocol => "udp", - ports => "22", - } - - shorewall::tcclasses { "ssh": - order => "1", - interface => "${device}", - rate => "4*full/100", - ceil => "full", - priority => "1", - } - - shorewall::tcclasses { "default": - order => "2", - interface => "${device}", - rate => "6*full/100", - ceil => "full", - priority => "2", - options => "default", + class { "firewall::implementations::${implementation}::shaping": + device => $device, + in_bandwidth => $in_bandwidth, + out_bandwidth => $out_bandwidth, } } |