-
Notifications
You must be signed in to change notification settings - Fork 25
/
hosts.yml
428 lines (407 loc) · 15.8 KB
/
hosts.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
# Ansible inventory config
dn42routers:
children:
na:
hosts:
yvr:
ansible_host: yvr.peer.highdef.network
ownip: 172.22.108.35
ownip6: fd86:bad:11b7:35::1
region: NANorthwest
# 44 = North America - West
dn42_regions: [44]
location: "Vancouver, BC, CA"
wg_pubkey: "O4qWRgbJVdOM8ktyUQyT1s11WkR16JTgtnn42m9A2R8="
link_local_ip6: "fe80::1080:35"
link_local_ip4: "169.254.108.35"
peerfinder_uuid: !vault |
$ANSIBLE_VAULT;1.1;AES256
61313830386464323830326139633933303639633331333961643163353234616430633738666533
3763326361363665666237643930653963373034356236360a643230656366636463303537626561
61313962336566366666313566396562393237363239326237623363636664323339343632323239
3263396537333262610a313637646436623264626130386564393563363138633563666463306339
32313135313635653461393365666131386262646364366632393363613139356462323233366566
6534613237326363643239306562653839663931616636383566
v4_only: true
igp_neighbours_append:
- name: igp-yvrlab
cost: "100"
igp_upstreams:
- sjc
- lax
- chi
sjc:
ansible_host: sjc.peer.highdef.network
ownip: 172.22.108.34
ownip6: fd86:bad:11b7:34::1
region: NAWest
# 44 = North America - West
dn42_regions: [44]
location: "San Jose, CA, US"
wg_pubkey: "Kz7mZN2ACCXSFKMiZDIVdVRmEPSnVfbEOqsxsDZ6hAw="
link_local_ip6: "fe80::1080:34"
link_local_ip4: "169.254.108.34"
igp_upstreams:
- ymq
- ams
igp_neighbours_append:
- name: igp-yvrlab
cost: "125"
peerfinder_uuid: !vault |
$ANSIBLE_VAULT;1.1;AES256
62656466383964393161373266613862646661376664663862616332346464643833613932306338
6331373231656165316265366236613963393232653865610a383532393834366263356533663034
63326132653032353030393332656139316535303966633538323038346231633165303838313332
6234646162373730620a376631343462383262663361366638386566343131333966353864363331
62663765643464333032363862646162626131643837363830323966336637303132643537366531
6332663330343631623035346365666137363534663034346439
lax:
ansible_host: lax.peer.highdef.network
ownip: 172.20.229.122
ownip6: fd86:bad:11b7:22::1
region: NAWest
# 44 = North America - West
dn42_region: 44
location: "Los Angeles, CA, US"
wg_pubkey: "H5XoB+8N4LoMAW4+vJ2jD6fO5vqQGZdj4MSip5clcCg="
link_local_ip6: "fe80::122"
link_local_ip4: "169.254.108.122"
dn42_regions: [44]
peerfinder_uuid: !vault |
$ANSIBLE_VAULT;1.1;AES256
61326137333930313265333366663166303137313335623539386434326333326233613337343332
3735393862313539313430643637303530663837623338300a353334373262346333303262306538
33643334373031306234306162616230393430373566663739663233353137656134326363346462
3739653737646464650a643564363561626438663534386532396638376566363238306230663931
64393732326436356131313461303832643838613363353533643334313963333832393631343564
3032363132333161643836326530313235633663333761363663
igp_upstreams:
- sjc
- chi
stub_ifnames_append: [lxcbr0]
chi:
ansible_host: chi.peer.highdef.network
ownip: 172.20.229.113
ownip6: fd86:bad:11b7:13::1
region: NACentral
dn42_regions: [43]
location: "Chicago, IL, US"
wg_pubkey: "u4WJMAoCHIOeh/+6NWMytNygp+/wrMogB+rwyVzXoEg="
link_local_ip6: "fe80::113"
link_local_ip4: "169.254.108.113"
igp_upstreams:
- sjc
- lax
- ymq
igp_neighbours_append:
- name: igp-yvrlab
cost: "150"
peerfinder_uuid: !vault |
$ANSIBLE_VAULT;1.1;AES256
32386336626462386237396166626161373364363438333464363637653737623635336531373038
6132363030623435353339373539326232613432306462310a653536636635313534396536386336
31663239633665643337303865326430326135316163393866383632323562353461646231366163
3466326361393136370a313336626637636664303262633036386635663237666166313764633839
37373166623466626333373461633764633465396534306334626665613032363538303363326565
6263663638626539383433663965316630363161386334366635
ymq:
ansible_host: ymq.peer.highdef.network
ownip: 172.20.229.123
ownip6: fd86:bad:11b7:23::1
region: NAEast
# 42 = North America - East
dn42_regions: [42]
location: "Montreal, QC, CA"
wg_pubkey: "YrlNsVP9bbTqNuNyQ/MVFzulZKNW5vMaDMzHVFNXSSE="
link_local_ip6: "fe80::123"
link_local_ip4: "169.254.108.123"
stub_ifnames_append: [lxcbr0]
igp_upstreams:
- sjc
- chi
- yvr
- ams
igp_neighbours_append:
- name: igp-yvrlab
cost: "165"
peerfinder_uuid: !vault |
$ANSIBLE_VAULT;1.1;AES256
64323931666633643432343836326231633037646664393363373032633964346535616362313761
6565663439303437616639323566656637383230353033620a373632386131333631303766626264
63366436663562383364623835373432356234343531623830336562626139323530343838643637
3163323662306438660a356466633763336562373562646439623831333532356231346261666263
39353262363137313933326633353534353263666638353237373565303933376465376332393535
6638643734356139646536346132646564316633353462633162
static_routes4:
- 172.22.108.40/29 via 172.22.108.41
eu:
hosts:
lon:
ansible_host: lon.peer.highdef.network
ownip: 172.20.229.116
ownip6: fd86:bad:11b7:116::1
region: EU
# 41 = Europe
dn42_regions: [41]
location: "London, UK"
wg_pubkey: "pEQZQOD67QeWXqrHLrMoCXug/cOXJFMXH5vwQ1cW70s="
link_local_ip6: "fe80::116"
link_local_ip4: "169.254.108.116"
igp_upstreams:
- ams
- fra
- ymq
- chi
peerfinder_uuid: !vault |
$ANSIBLE_VAULT;1.1;AES256
33396232663261353239656632316334353633363737343266346430363261386133653963303764
3437343666646235633831653934653431373934653730350a396163386439316338393965396230
31666537636365353965346563613862656166353965663365396261383263326166386332313064
3934653537343832610a373932653630316462316535653634383165343032663130376433373131
37383036396233343930373635653765653437393362373766623666353536343932643331396536
6630303035623932663833313132643533393163326637323961
ams:
ansible_host: ams.peer.highdef.network
ownip: 172.20.229.118
ownip6: fd86:bad:11b7:118::1
region: EU
# 41 = Europe
dn42_regions: [41]
location: "Amsterdam, NL"
wg_pubkey: "EdWVXZMdujdL/jX5FZDjkPQPVaLoWt4C8FowNRbuaTU="
link_local_ip6: "fe80::118"
link_local_ip4: "169.254.108.118"
igp_upstreams:
- sjc
- ymq
- chi
peerfinder_uuid: !vault |
$ANSIBLE_VAULT;1.1;AES256
39353032653136663332393362373362643432383364343332613837383362343565626631656439
6565356665393238633263373831333732343736333664340a633262353034613437623539336633
62666631656263336533643665396533326136626532653136323734646435356432363639343439
3266343233616531370a663365306261336631393162303932626236303066383764626432303065
63343234623261393433373532303364393561363339613532643136393435393333383563353262
6638396666656665393963386132666363363630313366366437
fra:
ansible_host: fra.peer.highdef.network
ownip: 172.20.229.117
ownip6: fd86:bad:11b7:117::1
region: EU
# 41 = Europe
dn42_regions: [41]
location: "Frankfurt, DE"
wg_pubkey: "oiSSSOMYxiiM0eQP9p8klwEfNn34hkNNv4S289WUciU="
link_local_ip6: "fe80::117"
link_local_ip4: "169.254.108.117"
igp_upstreams:
- ams
- ymq
- chi
- lax
peerfinder_uuid: !vault |
$ANSIBLE_VAULT;1.1;AES256
66663539666163643232363966386165313461626463623234313630653634326139333762623438
6163616366663864376238306165633166333863613938640a333066303563383939336535356134
65393134383532343266643335326261326434323134366562363638313237616432373730623866
6239383366333034610a333965633332393732323865623164616234643137333532386237383664
34666430383237313334323532656563643066386437396333343438326239333862653964636534
3535353563656565333736383463373635396666393865386263
stub_ifnames_append: [lxcbr0]
buh:
ansible_host: buh.peer.highdef.network
ownip: 172.22.108.37
ownip6: fd86:bad:11b7:137::1
region: EU2
# 41 = Europe
dn42_regions: [41]
location: "Bucharest, RO"
wg_pubkey: "pFIyJNJhen9fpTUw/wQNIB1MvvLftEV5LJudfT1UpDs="
link_local_ip6: "fe80::1080:137"
link_local_ip4: "169.254.108.37"
igp_upstreams:
- ams
- fra
peerfinder_uuid: !vault |
$ANSIBLE_VAULT;1.1;AES256
35383264383765633035623437353936323164366266393964373731366530396664303637663038
3732316365383836373732306539373038313333646263340a363437633561353934303865366365
35353065323562396366313533393331303433323835623934363732383635656262313030653931
6538313235393636610a363237643263666136636435613463323161623233343232613665383732
36386566353739363331333136653032626336346462393339313639373163636639383534366131
3564666630666430393463363461613535353365353037663339
notes:
- To be decommissioned 2024-12
sto:
ansible_host: sto.peer.highdef.network
ownip: 172.20.229.121
ownip6: fd86:bad:11b7:121::1
region: EU2
# 41 = Europe
dn42_regions: [41]
location: "Stockholm, SE"
wg_pubkey: "S82d2xkBdKzdx0i0vrS/sjScAjOHbUqZ0kDGf6drYAo="
link_local_ip6: "fe80::1080:121"
link_local_ip4: "169.254.108.121"
igp_upstreams:
- ams
- fra
- lon
peerfinder_uuid: !vault |
$ANSIBLE_VAULT;1.1;AES256
35326161393833383932663863363963396531613338636138356632383239613934653837363962
6664656537323063653932356365346536393664323836390a343534646437343431393733663363
36336530306231356631373464343132663036353936616130313366613566363239663031633837
3936306134333833630a366564613232306336376564386135306332366361643563366134383430
34313534386536343938393039333031356262366266633565656139326330363036396531333437
6164626164346661383033633564306639643937326566636234
apac:
hosts:
tyo:
ansible_host: tyo.peer.highdef.network
ownip: 172.20.229.124
ownip6: fd86:bad:11b7:224::1
region: AsiaEast
# 52 = Asia-E (JP,CN,KR)
dn42_regions: [52]
location: "Tokyo, JP"
wg_pubkey: "iJXjwJGGrUTQy/P3OXmZ5lM4cjrDAd9K+vonZVUZjxY="
link_local_ip6: "fe80::124"
link_local_ip4: "169.254.108.124"
igp_upstreams:
- sjc
- lax
- yvr
peerfinder_uuid: !vault |
$ANSIBLE_VAULT;1.1;AES256
32663165656132656664393866333930623862303064303536633732656635653463393230623733
3961666333366632653032636232316363333161346435330a303663373437653565623166333233
36356138386564646232623366633832303766396266633530316566353464373638393534633237
3430613136643164310a383835316563353663646332656230623234663863646563663965356532
32393032306165666330623030393434643330336439333664636266616332366333303538316238
6436656538616535393762643230346162386366383466333961
syd:
ansible_host: syd.peer.highdef.network
ownip: 172.20.229.125
ownip6: fd86:bad:11b7:225::1
region: Oceania
# 53 = Pacific
dn42_regions: [53]
location: "Sydney, AU"
wg_pubkey: "Xk9wCuwp3zK4WflTeAKBIjgIlr3+qUwIFCkF2uMyyF8="
link_local_ip6: "fe80::1080:125"
link_local_ip4: "169.254.108.125"
igp_upstreams:
- sjc
- lax
- tyo
peerfinder_uuid: !vault |
$ANSIBLE_VAULT;1.1;AES256
32393431386562303632323966623031306632346666353133303238336534626338396136346133
3932363534346361323465326161363066653839306461640a616432343563616630333831346231
38613335663661343731393730653437616539346633663531646264333537303530363132393165
6134323136323964370a396563333064366337636262396633313630343636323636306336613139
61373837626331303132353166643765663862316430306634386139633831626137356338613763
3266336132396239636330646164373962303363613934396364
hkg:
ansible_host: hkg.peer.highdef.network
ownip: 172.22.108.38
ownip6: fd86:bad:11b7:238::1
region: AsiaEast
# 52 = Asia East
dn42_regions: [52, 51]
location: "Hong Kong, HK"
wg_pubkey: "eedTHubyl5caiHH50GkknQa8SQtAF8q7aqmL26w5qSs="
link_local_ip6: "fe80::1080:38"
link_local_ip4: "169.254.108.38"
peerfinder_uuid: !vault |
$ANSIBLE_VAULT;1.1;AES256
61346165653336323535643932393736663834636231333436623534646537313034623365326136
6562343038373438336463616531343335386536623433320a303138653261366334336130393235
61363534653262313464623561336336393238613136636235386431376564356238633736633666
3734323066303664640a666430306336373962316239316564623836616132653732363565333933
30306531376639613932393666333136363030323966343634366235613535313432623338336161
3236626663393965356364356535363265336137383566343265
igp_upstreams:
- tyo
- syd
- lax
- fra
sa:
hosts: {}
anycast_recursors:
hosts:
yvr:
sjc:
lax:
chi:
ymq:
ams:
fra:
buh:
tyo:
syd:
hkg:
# This should be a subset of anycast_recursors
anycast_auth_dns:
hosts:
sjc:
ymq:
ams:
fra:
tyo:
# Clearnet web hosts, serving Bird-lg-go and splash site publicly
# Only one server at a time, since this is using HTTP verification to retrieve certs
web:
hosts:
ymq:
# Extra hosts managed by Ansible with reduced services - not open to dn42 peering
private:
hosts: {}
children:
ixprouters:
hosts: {}
smokeping:
hosts:
yvrping:
ansible_host: 172.22.108.3
ownip: 172.22.108.3
ownip6: fd86:bad:11b7:aaaa:38c2:3ff:fe0b:5860
smokeping_base_url: "ping.highdef.dn42"
location: "Vancouver, BC, Canada"
smokeping_dn42: true
region: NANorthwest
smokeping_target_regions:
full: [NAEast]
lite: [NAWest, NACentral, NASoutheast, EU]
v4_only: true
yvr:
ymq:
sjc:
lax:
chi:
lon:
ams:
fra:
buh:
sto:
tyo:
hkg:
syd:
webtrace:
hosts:
yvr:
ymq:
sjc:
lax:
chi:
lon:
ams:
fra:
buh:
sto:
tyo:
hkg:
syd:
netdata_skip:
hosts: {}