Posts

Showing posts with the label rule

Deploy OpenWRT as NAT VNF on OpenStack Tacker

The opensource project for router OpenWRT is quite powerful which can be used to deploy as VNF in OpenStack Tacker. Here is a sample of VNF template (VNFD) which will be used to deploy NAT service in Tacker using OpenWRT. Basically, the VNF will apply 2 NAT rules: 1. Redirect all requests to port 80 of any clients on the 'wan' interface of the OpenWRT to port 80 of the client with IP address 192.168.16.235 which is linked to the 'lan' interface. 2. Redirect all requests to port 22001 of any client on the wan interface to port 22 of  any clients on the 'lan' interface of the VNF. Note: Please read the official OpenStack documentation on how to deploy the VNF. Referecences: [0] https://docs.openstack.org/tacker/latest/install/deploy_openwrt.html [1] https://wiki.openwrt.org/doc/uci/firewall

Getting started with VyOS firewall

This is a super simple command lines to get started with VyOS firewall. In this example, we will create a firewall rule that block every packet coming out of interface eth0 except the client with IP address 172.20.1.11: 1. Create the firewall rule set by name set firewall name Genius default-action drop set firewall name Genius rule 1 action accept set firewall name Genius rule 1 source address 172.20.1.11 commit 2. Apply the rule set to an interface: set interfaces ethernet eth0 firewall out name genius commit save Reference:  https://wiki.vyos.net/wiki/User_Guide#Firewall

Don't forget rule #6

What is rule #6? "Don't take yourself so seriously." ~ Seth Godin 's Leadership Workshop .