if interface[:role] && (role = node[:networking][:roles][interface[:role]])
if role[interface[:family]]
- node.set[:networking][:interfaces][name][:prefix] = role[interface[:family]][:prefix]
- node.set[:networking][:interfaces][name][:gateway] = role[interface[:family]][:gateway]
+ node.normal[:networking][:interfaces][name][:prefix] = role[interface[:family]][:prefix]
+ node.normal[:networking][:interfaces][name][:gateway] = role[interface[:family]][:gateway]
end
- node.set[:networking][:interfaces][name][:metric] = role[:metric]
- node.set[:networking][:interfaces][name][:zone] = role[:zone]
+ node.normal[:networking][:interfaces][name][:metric] = role[:metric]
+ node.normal[:networking][:interfaces][name][:zone] = role[:zone]
end
prefix = node[:networking][:interfaces][name][:prefix]
- node.set[:networking][:interfaces][name][:netmask] = (~IPAddr.new(interface[:address]).mask(0)).mask(prefix)
- node.set[:networking][:interfaces][name][:network] = IPAddr.new(interface[:address]).mask(prefix)
+ node.normal[:networking][:interfaces][name][:netmask] = (~IPAddr.new(interface[:address]).mask(0)).mask(prefix)
+ node.normal[:networking][:interfaces][name][:network] = IPAddr.new(interface[:address]).mask(prefix)
end
package network_packages
dest "fw"
proto "tcp:syn"
dest_ports "http"
+ connection_limit node[:networking][:firewall][:http_connection_limit]
end
firewall_rule "accept-https" do
dest "fw"
proto "tcp:syn"
dest_ports "https"
+ connection_limit node[:networking][:firewall][:http_connection_limit]
end