clementnuss / ansible-dn42

Ansible code to configure dn42

ansible-dn42

This repository contains the configs for AS4242421080 / HIGHDEF-AS on dn42. For more details, see https://highdef.network/

Network topology

This iteration of the network uses OSPF (v2 + v3) and a full mesh of iBGP sessions over WireGuard. Internal costs between nodes are periodically generated based off latency and packet loss.

Routing Policy

Config structure

Here I use Ansible to configure the following components:

Peering tunnels

• Wireguard via ifupdown: roles/config-wireguard/
• OpenVPN (2.5.x): roles/config-openvpn/
• GRE (plain) via ifupdown: roles/config-gre-plain/

Services and daemons

• BIRD 2: roles/config-bird2/
• bird-lg-go looking glass: roles/setup-bird-lg-go/
• nginx - frontend reverse proxy to services + a dn42 splash site
• PowerDNS (authoritative server + recursor):
  • Anycast authoritative server for dn42 zones: roles/config-powerdns/
    • ns.highdef.dn42 / l.delegation-servers.dn42
  • Anycast recursor for dn42, clearnet, and interconnected networks: roles/config-powerdns-recursor/
    • dns.highdef.dn42 / l.recursive-servers.dn42 / 172.23.0.53 / fd42:d42:d42:53::1

Statistics and monitoring

• Netdata: roles/setup-netdata-v2/
• Smokeping @ ping.highdef.dn42: roles/setup-smokeping/

Network growth over time

Note that these values represent configured peers, which may or may not be up at any particular time.