更新mrzcpd的版本,更新部分配置文件的渲染,降级Framework中的MESA_htable版本。

This commit is contained in:
Lu Qiuwen
2019-06-22 23:04:07 +08:00
parent d58db4279e
commit c981b4fcdb
10 changed files with 118 additions and 21 deletions

View File

@@ -2,7 +2,7 @@
ansible_user=root ansible_user=root
[blade-00] [blade-00]
192.168.10.37 192.168.10.41
[blade-03] [blade-03]
192.168.10.40 192.168.10.42

Binary file not shown.

View File

@@ -17,7 +17,7 @@
- /tmp/ansible_deploy/dkms/zlib-1.2.7-18.el7.x86_64.rpm - /tmp/ansible_deploy/dkms/zlib-1.2.7-18.el7.x86_64.rpm
- /tmp/ansible_deploy/dkms/which-2.20-7.el7.x86_64.rpm - /tmp/ansible_deploy/dkms/which-2.20-7.el7.x86_64.rpm
- /tmp/ansible_deploy/dkms/dkms-2.7.1-1.el7.noarch.rpm - /tmp/ansible_deploy/dkms/dkms-2.7.1-1.el7.noarch.rpm
- /tmp/ansible_deploy/framework/framework-2.0.9.f583d06-1.el7.centos.x86_64 - /tmp/ansible_deploy/framework/framework-2.0.9.f583d06-1.el7.centos.x86_64.rpm
- name: "install/update rulescan header files" - name: "install/update rulescan header files"
synchronize: synchronize:
@@ -39,6 +39,11 @@
src: "{{ role_path }}/files/maat/lib/" src: "{{ role_path }}/files/maat/lib/"
dest: /opt/MESA/lib/ dest: /opt/MESA/lib/
- name: "downgrade htable"
synchronize:
src: "{{ role_path }}/files/htable"
dest: /opt/MESA/lib/
- name: "update ld" - name: "update ld"
command: ldconfig command: ldconfig

View File

@@ -26,12 +26,12 @@ ip_addr = 192.168.100.4
[tfe_cmsg_receiver] [tfe_cmsg_receiver]
listen_eth = {{ nic_inner_ctrl.name }} listen_eth = {{ nic_inner_ctrl.name }}
listen_port = 2375 listen_port = 2475
[watch_dog] [watch_dog]
switch = {{ kni.watch_dog.switch }} switch = {{ kni.watch_dog.switch }}
listen_eth = {{ nic_inner_ctrl.name }} listen_eth = {{ nic_inner_ctrl.name }}
listen_port = 2376 listen_port = 2476
keepalive_idle = 2 keepalive_idle = 2
keepalive_intvl = 1 keepalive_intvl = 1
keepalive_cnt = 3 keepalive_cnt = 3

View File

@@ -3,7 +3,6 @@
synchronize: synchronize:
src: "{{ role_path }}/files/" src: "{{ role_path }}/files/"
dest: "/tmp/ansible_deploy/" dest: "/tmp/ansible_deploy/"
when: nic_traffic_mirror.use_mrzcpd
- name: "install mrzcpd" - name: "install mrzcpd"
yum: yum:
@@ -11,17 +10,27 @@
state: present state: present
vars: vars:
packages: packages:
- /tmp/ansible_deploy/mrzcpd-4.3.9.497aaf5-1.el7.x86_64.rpm - /tmp/ansible_deploy/mrzcpd-4.3.10.497aaf5-1.el7.x86_64.rpm
when: nic_traffic_mirror.use_mrzcpd
- name: "update sysconfig/mrzcpd" - name: "update sysconfig/mrzcpd"
template: template:
src: "{{ role_path }}/templates/mrzcpd.j2" src: "{{ role_path }}/templates/mrzcpd.j2"
dest: /etc/sysconfig/mrzcpd dest: /etc/sysconfig/mrzcpd
when: nic_traffic_mirror.use_mrzcpd
- name: "update mrglobal.conf" - name: "update mrglobal.conf - slave blade"
template: template:
src: "{{ role_path }}/templates/mrglobal.conf.traffic_mirror.j2" src: "{{ role_path }}/templates/mrglobal.conf.traffic_mirror.j2"
dest: /opt/mrzcpd/etc/mrglobal.conf dest: /opt/mrzcpd/etc/mrglobal.conf
when: nic_traffic_mirror.use_mrzcpd when: nic_traffic_mirror is defined
- name: "update mrglobal.conf - master blade"
template:
src: "{{ role_path }}/templates/mrglobal.conf.inline.j2"
dest: /opt/mrzcpd/etc/mrglobal.conf
when: nic_traffic_mirror is not defined
- name: "update mrtunnat.conf - master blade"
template:
src: "{{ role_path }}/templates/mrtunnat.conf.inline.j2"
dest: /opt/mrzcpd/etc/mrtunnat.conf
when: nic_traffic_mirror is not defined

View File

@@ -0,0 +1,76 @@
[device]
device={{nic_data_incoming.name}},{{nic_to_tfe.tfe0.name}},{{nic_to_tfe.tfe1.name}},{{nic_to_tfe.tfe2.name}},vxlan_user,vxlan_fwd
sz_tunnel=8192
sz_buffer=0
[device:{{nic_data_incoming.name}}]
{% if nic_data_incoming.ip is defined %}
in_addr={{nic_data_incoming.ip}}
{% endif %}
{% if nic_data_incoming.mask is defined %}
in_mask={{nic_data_incoming.mask}}
{% endif %}
{% if nic_data_incoming.gw is defined %}
gateway={{nic_data_incoming.gw}}
{% endif %}
jumbo_frame=1
max_rx_pkt_len=15360
clear_tx_flags=1
vlan-filter=1
vlan-id-allow=1
vlan-pvid=0
vlan-pvid-mode=0
[device:{{nic_to_tfe.tfe0.name}}]
jumbo_frame=1
max_rx_pkt_len=15360
clear_tx_flags=1
promisc=1
[device:{{nic_to_tfe.tfe1.name}}]
jumbo_frame=1
max_rx_pkt_len=15360
clear_tx_flags=1
promisc=1
[device:{{nic_to_tfe.tfe2.name}}]
jumbo_frame=1
max_rx_pkt_len=15360
clear_tx_flags=1
promisc=1
[service]
# lcore id for i/o service, use comma to split
iocore=53,54
distmode=3
hashmode=0
[eal]
virtaddr=0x7f40c4a00000
loglevel=7
[keepalive]
check_spinlock=0
[ctrlzone]
ctrlzone0=tunnat,64
[pool]
create_mode=3
sz_direct_pktmbuf=4194304
sz_indirect_pktmbuf=8192
sz_cache=256
sz_data=4096
[forward]
nr_forward_rule=10
forward_rule_0=pv,{{nic_data_incoming.name}},{{nic_data_incoming.name}}
forward_rule_1=vp,{{nic_data_incoming.name}},{{nic_data_incoming.name}}
forward_rule_2=vv,vxlan_fwd,vxlan_user
forward_rule_3=vv,vxlan_user,vxlan_fwd
forward_rule_4=pv,{{nic_to_tfe.tfe0.name}},{{nic_to_tfe.tfe0.name}}
forward_rule_5=vp,{{nic_to_tfe.tfe0.name}},{{nic_to_tfe.tfe0.name}}
forward_rule_6=pv,{{nic_to_tfe.tfe1.name}},{{nic_to_tfe.tfe1.name}}
forward_rule_7=vp,{{nic_to_tfe.tfe1.name}},{{nic_to_tfe.tfe1.name}}
forward_rule_8=pv,{{nic_to_tfe.tfe2.name}},{{nic_to_tfe.tfe2.name}}
forward_rule_9=vp,{{nic_to_tfe.tfe2.name}},{{nic_to_tfe.tfe2.name}}

View File

@@ -0,0 +1,5 @@
[tunnat]
lcore_id=49,50,51,52
appsym=tunnat
phydev={{nic_data_incoming.name}}
virtdev=vxlan_fwd

View File

@@ -1,6 +1,6 @@
TFE_DEVICE_DATA_INCOMING={{nic_data_incoming.name}} TFE_DEVICE_DATA_INCOMING={{nic_data_incoming.name}}
TFE_LOCAL_MAC_DATA_INCOMING=fe:65:b7:00:00:01 TFE_LOCAL_MAC_DATA_INCOMING=fe:65:b7:03:50:bd
TFE_PEER_MAC_DATA_INCOMING=aa:bb:cc:dd:ee:ff TFE_PEER_MAC_DATA_INCOMING=aa:bb:cc:dd:ee:ff
TFE_LOCAL_IP_DATA_INCOMING=172.16.241.2 TFE_LOCAL_IP_DATA_INCOMING=172.16.241.2
TFE_PEER_IP_DATA_INCOMING=172.16.241.1 TFE_PEER_IP_DATA_INCOMING=172.16.241.1

View File

@@ -1,26 +1,28 @@
- hosts: blade-00 - hosts: blade-00
roles: roles:
- framework
- mrzcpd
- kni - kni
vars_files: vars_files:
- "vars/common.yml" - "vars/common.yml"
- "vars/kni.yml" - "vars/kni.yml"
vars: vars:
- nic_mgr: - nic_mgr:
name: eth0 name: enp7s0
- nic_data_incoming: - nic_data_incoming:
name: eth6 name: ens1f4
ip: 192.168.17.1 ip: 192.168.17.1
mask: 255.255.255.0 mask: 255.255.255.0
gw: 192.168.17.254 gw: 192.168.17.254
- nic_inner_ctrl: - nic_inner_ctrl:
name: eth2.100 name: ens1.100
- nic_to_tfe: - nic_to_tfe:
tfe0: tfe0:
name: eth7 name: ens1f5
tfe1: tfe1:
name: eth8 name: ens1f6
tfe2: tfe2:
name: eth9 name: ens1f7
- hosts: blade-03 - hosts: blade-03
roles: roles:
@@ -32,12 +34,12 @@
- "vars/tfe.yml" - "vars/tfe.yml"
vars: vars:
- nic_mgr: - nic_mgr:
name: eth0 name: enp7s0
- nic_data_incoming: - nic_data_incoming:
name: eth3 name: ens1f1
mac: AA:BB:CC:DD:EE:FF mac: AA:BB:CC:DD:EE:FF
- nic_traffic_mirror: - nic_traffic_mirror:
name: eth4 name: ens1f2
use_mrzcpd: 1 use_mrzcpd: 1
# - hosts: blade-00 # - hosts: blade-00