Skip to content

Test and select a software router

Currently, the network management of the gateways is done manually with some iptables rules and custom route management. Having a software router can help to centralize the rules and the network configuration like the VPNs and simplify the configuration. As PFSense is a well-known solution on the network management community, the test will initially target it to check if it can match our needs.

//list of tasks copied from the first comment//

  • partially done (ping issue) Testing if having a interface on the VLAN1300 is working as the hypervisor should be well configuration
  • Testing the HA possibilities [1]
  • Testing configuration traceability [2] The plugin is not yet available on the current version
  • VPN [4]
    • Test ipsec vpn / azure compatibility
    • Test OpenVPN and certificate management
  • Test the monitoring capabilities / prometheus integration (via an snmp exporter[5] or netflow (there is a lot of resources on internet relative to prometheus / grafana integration[6]))

Migrated from T2691 (view on Phabricator)

Edited by Antoine R. Dumont