Uploaded image for project: 'Forge Modules'
  1. Forge Modules
  2. MODULES-61

support for multiple source and dest address lists

    Details

    • Template:

      Activity

      Hide
      heidi.pio Heidi Pio added a comment -

      12/16/2013 14:28:06; alex; Imported from Github issue puppetlabs-firewall-113, originally reported by kbarber

      Show
      heidi.pio Heidi Pio added a comment - 12/16/2013 14:28:06; alex; Imported from Github issue puppetlabs-firewall-113, originally reported by kbarber
      Hide
      heidi.pio Heidi Pio added a comment -

      02/25/2013 14:40:50; alex; Github comment from kbarber: #130 talks about using ipset, its a far more performant way of support multiple source/destination address lists.

      Show
      heidi.pio Heidi Pio added a comment - 02/25/2013 14:40:50; alex; Github comment from kbarber: #130 talks about using ipset, its a far more performant way of support multiple source/destination address lists.
      Hide
      heidi.pio Heidi Pio added a comment -

      04/01/2013 20:37:08; alex; Github comment from tskirvin: Do you have any idea when this will be resolved one way or the other? And/or is there any way I could help?

      Show
      heidi.pio Heidi Pio added a comment - 04/01/2013 20:37:08; alex; Github comment from tskirvin: Do you have any idea when this will be resolved one way or the other? And/or is there any way I could help?
      Hide
      heidi.pio Heidi Pio added a comment -

      04/09/2013 15:24:44; alex; Github comment from tskirvin: I've written a patch that seems to work, based on a fairly-ugly merge of this tree and https://github.com/glesperance/puppetlabs-firewall; I don't have adequate testing facilities at the moment, though, nor am I entirely sure how to test the hard part here (that is: making sure that puppet runs without re-updating rules after setting things up the first time, and updating rules rather than just adding/deleting them).

      Show
      heidi.pio Heidi Pio added a comment - 04/09/2013 15:24:44; alex; Github comment from tskirvin: I've written a patch that seems to work, based on a fairly-ugly merge of this tree and https://github.com/glesperance/puppetlabs-firewall ; I don't have adequate testing facilities at the moment, though, nor am I entirely sure how to test the hard part here (that is: making sure that puppet runs without re-updating rules after setting things up the first time, and updating rules rather than just adding/deleting them).
      Hide
      heidi.pio Heidi Pio added a comment -

      05/03/2013 04:19:37; alex; Github comment from rfdrake: tskirvin, Can you post a fork of your work? I just found out I need this kind of thing and I'm saddened to see it's been up in the air so long. I'll gladly test your changes however I can, and I'll try to write some unit tests to make sure it's testable upstream (hoping I don't just say this and walk away from it

      Show
      heidi.pio Heidi Pio added a comment - 05/03/2013 04:19:37; alex; Github comment from rfdrake: tskirvin, Can you post a fork of your work? I just found out I need this kind of thing and I'm saddened to see it's been up in the air so long. I'll gladly test your changes however I can, and I'll try to write some unit tests to make sure it's testable upstream (hoping I don't just say this and walk away from it
      Hide
      heidi.pio Heidi Pio added a comment -

      05/03/2013 13:09:42; alex; Github comment from kbarber: @rfdrake @tskirvin absolutely, get this PR raised don't just paste a link - someone is bound to help out with tests as this is an often sought out feature. Up until now though, there has always been bugs with every patch put forth so I'm keen to see someone do a quality job on this. I think if you get the basics up, people can clean it up and make it work 100%.

      Show
      heidi.pio Heidi Pio added a comment - 05/03/2013 13:09:42; alex; Github comment from kbarber: @rfdrake @tskirvin absolutely, get this PR raised don't just paste a link - someone is bound to help out with tests as this is an often sought out feature. Up until now though, there has always been bugs with every patch put forth so I'm keen to see someone do a quality job on this. I think if you get the basics up, people can clean it up and make it work 100%.
      Hide
      heidi.pio Heidi Pio added a comment -

      05/03/2013 14:26:58; alex; Github comment from tskirvin: Okay, I've put this together: https://github.com/tskirvin/puppet-firewall-tskirvin
      As I note in the README, this includes two tracks to solve the same problem. The first one is what I was referring to in my comment from last month - it's a bunch of patches to the main source tree that more-or-less support multiple sourcing, and may be a good place to work from, but it didn't work all the way. The second track is a simple define that lets you set up multiple firewall resources; it's extremely hack-y, but we're using it in production right now.

      Hopefully this will help!

      Show
      heidi.pio Heidi Pio added a comment - 05/03/2013 14:26:58; alex; Github comment from tskirvin: Okay, I've put this together: https://github.com/tskirvin/puppet-firewall-tskirvin As I note in the README, this includes two tracks to solve the same problem. The first one is what I was referring to in my comment from last month - it's a bunch of patches to the main source tree that more-or-less support multiple sourcing, and may be a good place to work from, but it didn't work all the way. The second track is a simple define that lets you set up multiple firewall resources; it's extremely hack-y, but we're using it in production right now. Hopefully this will help!
      Hide
      heidi.pio Heidi Pio added a comment -

      10/16/2013 12:11:30; alex; Github comment from thias: After the missing "recent" iptables module support, then the provider limitation which prevents ip6tables from being purged, this is the next brick wall I've stumbled upon with the puppetlabs-firewall module.

      This is just a "me too". With hiera, this feature would really make a lot of sense.

      Show
      heidi.pio Heidi Pio added a comment - 10/16/2013 12:11:30; alex; Github comment from thias: After the missing "recent" iptables module support, then the provider limitation which prevents ip6tables from being purged, this is the next brick wall I've stumbled upon with the puppetlabs-firewall module. This is just a "me too". With hiera, this feature would really make a lot of sense.

        People

        • Assignee:
          Unassigned
          Reporter:
          heidi.pio Heidi Pio
        • Votes:
          0 Vote for this issue
          Watchers:
          2 Start watching this issue

          Dates

          • Created:
            Updated:
            Resolved: