Skip to content

High availability stack #871

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
gsanchietti merged 106 commits into from
Jun 9, 2025
Merged

High availability stack #871

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
106 commits
Select commit Hold shift + click to select a range
e566ed4
conf: add keepalived and conntrackd
gsanchietti Oct 23, 2024
842e966
conf: ha, add luci app
gsanchietti Oct 24, 2024
e5da442
ns-ha: basic config script
gsanchietti Oct 24, 2024
6a8971e
ns-ha: add README
gsanchietti Oct 24, 2024
31e63b1
na-api: add ha zone template
gsanchietti Oct 29, 2024
38d14b2
README: add OpenVPN note
gsanchietti Oct 29, 2024
9075dd3
ns-ha: stub package
gsanchietti Oct 29, 2024
99501fa
packages: import keepalived
gsanchietti Oct 29, 2024
d8077e1
ns-api: fix zone template
gsanchietti Oct 29, 2024
4a878a6
ns-api: add ns.ha
gsanchietti Oct 29, 2024
0938ecc
ns-ha: improve README
gsanchietti Oct 29, 2024
a631e2d
ns-api: do not regenerate password
gsanchietti Oct 29, 2024
48d81f7
ns-ha: improve readme
gsanchietti Oct 29, 2024
4d03624
fix(keepalived): update to latest release
gsanchietti Dec 19, 2024
ccb5603
fix: setup root, zone and vrrp
gsanchietti Dec 19, 2024
b4e97a8
feat: add ns-plug, fix openvpn
gsanchietti Dec 20, 2024
e61c47a
breaking: use root for rsync
gsanchietti Dec 20, 2024
b0b3e31
fix: add cron library
gsanchietti Dec 20, 2024
5e8d184
feat: add conntrackd config
gsanchietti Dec 20, 2024
0ff8715
fix(packages): use upstream keepalived
gsanchietti Feb 12, 2025
75c5daa
fix(ns-api): correct conntrack template name
gsanchietti Feb 12, 2025
88db537
fix(ns-ha): use custom rsync script
gsanchietti Feb 12, 2025
46e9ae1
feat(ns-api): ha, add status
gsanchietti Feb 13, 2025
5530097
feat(ns-ha): handle phonehome
gsanchietti Feb 13, 2025
c21decf
feat(ns-ha): sync backup password
gsanchietti Feb 13, 2025
046abe3
fix(ns-ha): improve readme
gsanchietti Feb 13, 2025
fc65417
feat(ns-api): ha, add custom dropbear instance
gsanchietti Feb 13, 2025
c475452
feat(ns-ha): add nat helpers
gsanchietti Feb 13, 2025
de6802a
feat(ns-ha): add mwan3 and nginx
gsanchietti Feb 13, 2025
265dd7f
feat(ns-ha): add users and objects db
gsanchietti Feb 13, 2025
0eb5e11
fix(ns-ha): sync simple files using library
gsanchietti Feb 13, 2025
2d716e7
fix(ns-ha): use tab inside Makefile
gsanchietti Feb 13, 2025
2158f44
feat(ns-ha): add qosify
gsanchietti Feb 13, 2025
0b73daa
feat(ns-ha): add netmap
gsanchietti Feb 13, 2025
4d5ac1e
feat(ns-ha): add msmtp
gsanchietti Feb 13, 2025
5bae7f1
feat(ns-ha): add snmpd
gsanchietti Feb 13, 2025
545c8c9
feat(ns-ha): add ddns
gsanchietti Feb 13, 2025
a4beae0
feat(ns-ha): add adblock and banip
gsanchietti Feb 13, 2025
286b59e
feat(ns-ha): add netifyd and dpi
gsanchietti Feb 13, 2025
da51e2d
feat(ns-ha): add flashstart
gsanchietti Feb 13, 2025
c00d5a4
feat(ns-ha): add snort
gsanchietti Feb 13, 2025
f2fd3ee
feat(ns-ha): add ipsec
gsanchietti Feb 14, 2025
6d62bf1
feat(ns-ha): add mac binding
gsanchietti Feb 14, 2025
63428ef
feat(ns-ha): handle wg interfaces, ipsec interfaces, routes
gsanchietti Feb 14, 2025
cfdac93
fix(ns-ha): ns-plug, handle push-reports
gsanchietti Feb 14, 2025
0e54f05
feat(ns-ha): add acme
gsanchietti Feb 14, 2025
84b7481
ns-ha: Update README
filippocarletti Feb 15, 2025
decf095
ns-ha: fix comment
filippocarletti Feb 17, 2025
d057edd
ns-ha: VIP in CIDR format
filippocarletti Feb 17, 2025
6aace4f
fix(ns-api): ns.ha, remove static IP address
filippocarletti Feb 21, 2025
b8f9eb0
fix(ns-api): ns.ha, fix rsync script path
filippocarletti Feb 21, 2025
effa317
fix(ns-ha): remove ha zone
gsanchietti Apr 16, 2025
f463182
feat(ns-ha): add automatic config script
gsanchietti Apr 17, 2025
2889906
chore(ns-ha): refactor API and config script
gsanchietti Apr 17, 2025
9f135ef
fix(ns-ha): prevent changes from Flashstart
gsanchietti Apr 18, 2025
c908b5c
feat(ns-ha): configure backup node network
gsanchietti Apr 22, 2025
9ca52f0
feat(ns-ha): support aliases
gsanchietti Apr 22, 2025
e175646
feat(ns-ha): add alias removal feature
gsanchietti Apr 22, 2025
2f1396b
feat(ns-ha): add remove-interface feature
gsanchietti Apr 23, 2025
dd1feeb
chore(ns-ha): improve readme
gsanchietti Apr 23, 2025
c4718a7
feat(ns-ha): add reset function
gsanchietti Apr 23, 2025
328fdca
fix(ns-ha): ns-rsync, remove pubkey log
gsanchietti Apr 23, 2025
cf36719
chor(ns-ha): improve README
gsanchietti Apr 23, 2025
6c70338
fix(ns-ha): make sure keepalived is restarted
gsanchietti Apr 23, 2025
f20e97a
feat(ns-ha): improve shell prompt
gsanchietti Apr 23, 2025
af57e13
chore(ns-ha): rename main to primary
gsanchietti Apr 23, 2025
0295930
fix(ns-ha): show HA prompt on term title
gsanchietti Apr 23, 2025
49ea1e8
fix(ns-ha): make lan interface removable
gsanchietti Apr 23, 2025
7af2911
fix(ns-ha): set correct src_addr on virtual routes
gsanchietti Apr 23, 2025
95abd16
chore(ns-ha): improve README with debug
gsanchietti Apr 23, 2025
857a912
fix(ns-ha): improve error handling on remote check
gsanchietti Apr 24, 2025
1b071d3
feat(ns-ha): validate DHCP router option value
gsanchietti Apr 24, 2025
7652e2c
fix (ns-ha): keepalived readme changes (#1193)
cotosso May 5, 2025
e0399ca
fix(ns-ha): fix typo
gsanchietti May 5, 2025
40d44f6
fix(ns-ha): correctly retrieve the current state
gsanchietti May 6, 2025
1f40ff9
fix(ns.ha): dhcp, check for dns option router
gsanchietti May 6, 2025
470b6d4
fix(ns-ha): doc, better explain alias
gsanchietti May 7, 2025
f29c044
fix(ns-ha): remove keepalived-config
gsanchietti May 7, 2025
661a8af
fix(ns-api): ha, fix reset of remote node
gsanchietti May 7, 2025
a52c8dd
fix(ns-ha): reset, restore crontab
gsanchietti May 8, 2025
7308103
feat(ns-ha): add ssh-remote command
gsanchietti May 8, 2025
5cc2a6e
fix(ns-api): update, suppress upgrade error
gsanchietti May 8, 2025
2076666
feat(ns-ha): add upgrade-remote command
gsanchietti May 8, 2025
b9965bc
fix(ns-ha): readme, better explain upgrade and ssh access
gsanchietti May 9, 2025
57bc02f
feat(ns-ha): add alerts
gsanchietti May 9, 2025
2c73759
fix(ns-ha): profile.d, fix xterm title
gsanchietti May 9, 2025
42af23c
fix(ns-ha): pass check errors from remote
gsanchietti May 26, 2025
97bb28e
feat(ns-ha): allow custom lan and wan interfaces
gsanchietti May 26, 2025
b72e447
fix(ns-ha): api, fix DHCP check
gsanchietti May 27, 2025
35d3029
fix(ns-ha): enable ipsec after switch
gsanchietti May 28, 2025
2db3d71
fix(ns-ha): really fix ns-ha-export
gsanchietti May 29, 2025
3b240e5
fix(ns-ha): ns-ha-export, execute only on primary/master
gsanchietti May 29, 2025
e158df0
fix(ns-ha): fix ipsec and route migration
gsanchietti May 30, 2025
77a6902
fix(ns-ha): flashstart, switch to new implementation
gsanchietti May 30, 2025
8a6f4b7
fix(ns-ha): sync all dpi dbs
gsanchietti May 30, 2025
c16e6cf
fix(ns-ui): add missing ui config
gsanchietti May 30, 2025
984c215
feat(ns-ha): support dedalo hotspot
gsanchietti May 30, 2025
5c939b2
fix(ns-ha): support extra lans with DHCP, fix mwan
gsanchietti Jun 5, 2025
fe73a11
feat(ns-ha): restore IP address on remove
gsanchietti Jun 5, 2025
fadb899
feat(ns-ha): status, add keepalived stats
gsanchietti Jun 6, 2025
2618dbf
fix(ns-ha): wan, use /24 network
gsanchietti Jun 6, 2025
c21b2fa
fix(ns-ha): acme, copy cert links
gsanchietti Jun 6, 2025
e93e169
fix(ns-api): ha, improve status output
gsanchietti Jun 6, 2025
c0e4936
fix(ns-api): ha, stop and restart mwan3
gsanchietti Jun 6, 2025
827c622
fix(ns-ha): hotspot, fix mac address change
gsanchietti Jun 6, 2025
62fde14
fix(ns-api): ha, improve status output
gsanchietti Jun 9, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
31 changes: 31 additions & 0 deletions config/ha.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,31 @@
CONFIG_PACKAGE_sudo=y
CONFIG_PACKAGE_kmod-nf-ipvs=y
CONFIG_PACKAGE_kmod-macvlan=y
CONFIG_PACKAGE_libinotifytools=y
CONFIG_PACKAGE_libnl-core=y
CONFIG_PACKAGE_libnl-genl=y
CONFIG_PACKAGE_libnl-route=y
CONFIG_PACKAGE_conntrackd=y
CONFIG_PACKAGE_keepalived=y

CONFIG_KEEPALIVED_SHA1=y
CONFIG_KEEPALIVED_LVS=y
CONFIG_KEEPALIVED_LVS_SYNCD=y
CONFIG_KEEPALIVED_LVS_64BIT_STATS=y
CONFIG_KEEPALIVED_FWMARK=y
CONFIG_KEEPALIVED_VRRP=y
CONFIG_KEEPALIVED_IPTABLES=y
CONFIG_KEEPALIVED_IP6TABLES=y
CONFIG_KEEPALIVED_NFTABLES=y
CONFIG_KEEPALIVED_VRRP_AUTH=y
CONFIG_KEEPALIVED_CHECKSUM_COMPAT=y
CONFIG_KEEPALIVED_ROUTES=y
CONFIG_KEEPALIVED_LINKBEAT=y

CONFIG_PACKAGE_keepalived-sync=y
CONFIG_PACKAGE_coreutils-timeout=y
CONFIG_PACKAGE_inotifywait=y

CONFIG_PACKAGE_luci-app-keepalived=y

CONFIG_PACKAGE_ns-ha=y
4 changes: 3 additions & 1 deletion packages/ns-api/Makefile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@ define Package/ns-api
CATEGORY:=NethSecurity
TITLE:=NethSecurity REST API
URL:=https://github.com/NethServer/nethsecurity-controller/
DEPENDS:=+python3-nethsec +python3-openssl +python3-urllib +python3-idna +python3-requests
DEPENDS:=+python3-nethsec +python3-openssl +python3-urllib +python3-idna +python3-requests +python3-paramiko
PKGARCH:=all
endef

Expand Down Expand Up @@ -162,6 +162,8 @@ define Package/ns-api/install
$(INSTALL_DATA) ./files/ns.nathelpers.json $(1)/usr/share/rpcd/acl.d/
$(INSTALL_BIN) ./files/ns.wizard $(1)/usr/libexec/rpcd/
$(INSTALL_DATA) ./files/ns.wizard.json $(1)/usr/share/rpcd/acl.d/
$(INSTALL_BIN) ./files/ns.ha $(1)/usr/libexec/rpcd/
$(INSTALL_DATA) ./files/ns.ha.json $(1)/usr/share/rpcd/acl.d/
$(INSTALL_DIR) $(1)/lib/upgrade/keep.d
$(INSTALL_CONF) files/msmtp.keep $(1)/lib/upgrade/keep.d/msmtp
$(INSTALL_CONF) files/nat-helpers.keep $(1)/lib/upgrade/keep.d/nat-helpers
Expand Down
Loading
Loading