同步Astana客户验证环境配置

roles/mrzcpd/tasks/main.yml

@@ -10,7 +10,7 @@
     state: present
   vars:
     packages:
-    - /tmp/ansible_deploy/mrzcpd-4.3.10.497aaf5-1.el7.x86_64.rpm
+    - /tmp/ansible_deploy/mrzcpd-4.3.12.6ee1589-1.el7.x86_64.rpm
 
 - name: "update sysconfig/mrzcpd"
   template:
@@ -33,4 +33,4 @@
   template:
     src: "{{ role_path }}/templates/mrtunnat.conf.inline.j2"
     dest: /opt/mrzcpd/etc/mrtunnat.conf
-  when: nic_traffic_mirror is not defined
+  when: nic_traffic_mirror is not defined

roles/mrzcpd/templates/mrglobal.conf.inline.j2

@@ -17,7 +17,7 @@ jumbo_frame=1
 max_rx_pkt_len=15360
 clear_tx_flags=1
 vlan-filter=1
-vlan-id-allow=3811,3812,3821,3822
+vlan-id-allow=1301,1302,2301,2302,1501,1502,2501,2502,1601,1602,2601,2602,1701,1702,2701,2702,1801,1802,2801,2802,1901,1902,2901,2902
 vlan-pvid=0
 vlan-pvid-mode=0
 
@@ -42,7 +42,7 @@ promisc=1
 [service]
 # lcore id for i/o service, use comma to split
 iocore=53,54
-distmode=3
+distmode=2
 hashmode=0
 
 [eal]

roles/mrzcpd/templates/mrtunnat.conf.inline.j2

@@ -3,14 +3,36 @@ lcore_id=49,50,51,52
 appsym=tunnat
 phydev={{nic_data_incoming.name}}
 virtdev=vxlan_fwd
-nr_max_sessions=131070
-expire_time=180
+nr_max_sessions=524280
+nr_slots=1048576
+expire_time=60
 reverse_tunnel=0
 use_recent_tunnel=0
+use_tuple4_as_sskey=1
 
 [vlan_flipping]
 enable=1
-c_router_vlan_id_0=3811
-i_router_vlan_id_0=3812
-c_router_vlan_id_1=3821
-i_router_vlan_id_1=3822
+c_router_vlan_id_0=1301
+i_router_vlan_id_0=1302
+c_router_vlan_id_1=2301
+i_router_vlan_id_1=2302
+c_router_vlan_id_2=1501
+i_router_vlan_id_2=1502
+c_router_vlan_id_3=2501
+i_router_vlan_id_3=2502
+c_router_vlan_id_4=1601
+i_router_vlan_id_4=1602
+c_router_vlan_id_5=2601
+i_router_vlan_id_5=2602
+c_router_vlan_id_6=1701
+i_router_vlan_id_6=1702
+c_router_vlan_id_7=2701
+i_router_vlan_id_7=2702
+c_router_vlan_id_8=1801
+i_router_vlan_id_8=1802
+c_router_vlan_id_9=2801
+i_router_vlan_id_9=2802
+c_router_vlan_id_10=1901
+i_router_vlan_id_10=1902
+c_router_vlan_id_11=2901
+i_router_vlan_id_11=2902