summaryrefslogtreecommitdiff
path: root/manifests/shaping.pp
diff options
context:
space:
mode:
Diffstat (limited to 'manifests/shaping.pp')
-rw-r--r--manifests/shaping.pp44
1 files changed, 5 insertions, 39 deletions
diff --git a/manifests/shaping.pp b/manifests/shaping.pp
index 277f82c..83558e9 100644
--- a/manifests/shaping.pp
+++ b/manifests/shaping.pp
@@ -1,46 +1,12 @@
class firewall::shaping(
+ $implementation = lookup('firewall::implementation', undef, undef, 'shorewall'),
$device = lookup('firewall::device', undef, undef, 'eth0'),
$in_bandwidth = lookup('firewall::in_bandwidth', undef, undef, '1000mbps'),
$out_bandwidth = lookup('firewall::out_bandwidth', undef, undef, '1000mbps')
) {
- #
- # Traffic shaping
- #
- shorewall::tcdevices { "${device}":
- in_bandwidth => "$in_bandwidth",
- out_bandwidth => "$out_bandwidth",
- }
-
- shorewall::tcrules { "ssh-tcp":
- order => "1",
- source => "0.0.0.0/0",
- destination => "0.0.0.0/0",
- protocol => "tcp",
- ports => "22",
- }
-
- shorewall::tcrules { "ssh-udp":
- order => "1",
- source => "0.0.0.0/0",
- destination => "0.0.0.0/0",
- protocol => "udp",
- ports => "22",
- }
-
- shorewall::tcclasses { "ssh":
- order => "1",
- interface => "${device}",
- rate => "4*full/100",
- ceil => "full",
- priority => "1",
- }
-
- shorewall::tcclasses { "default":
- order => "2",
- interface => "${device}",
- rate => "6*full/100",
- ceil => "full",
- priority => "2",
- options => "default",
+ class { "firewall::implementations::${implementation}::shaping":
+ device => $device,
+ in_bandwidth => $in_bandwidth,
+ out_bandwidth => $out_bandwidth,
}
}