/
inputs_vsphere_gilan_v2.0.0.yaml
361 lines (336 loc) · 9.53 KB
/
inputs_vsphere_gilan_v2.0.0.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
## NETWORKING CONFIG ##
mgmt_net: network_MGMT
mgmt_subnet_cidr: 10.0.0.0/24
mgmt_default_gw: 10.0.0.254
mgmt_dns: 8.8.8.8
#mgmt_ip_range: 10.0.0.128/26
mgmt_ip_range:
- '10.0.0.128-10.0.0.191'
mgmt_net_sw_dist: true
ctrl_net: network_CTRL
ctrl_subnet_cidr: 10.1.0.0/24
#ctrl_ip_range: 10.1.0.128/26
ctrl_ip_range:
- '10.1.0.128-10.1.0.191'
ctrl_net_sw_dist: true
ha_net: network_HA
ha_subnet_cidr: 10.2.0.0/24
#ha_ip_range: 10.2.0.128/26
ha_ip_range:
- '10.2.0.128-10.2.0.191'
ha_net_sw_dist: true
pdn_net: network_PDN
pdn_subnet_cidr: 10.3.0.0/24
#pdn_ip_range: 10.3.0.128/26
pdn_ip_range:
- '10.3.0.128-10.3.0.191'
pdn_net_sw_dist: true
pgw_net: network_PGW
pgw_subnet_cidr: 10.4.0.0/24
#pgw_ip_range: 10.4.0.128/26
pgw_ip_range:
- '10.4.0.128-10.4.0.191'
pgw_net_sw_dist: true
pdn_dag_net: network_PDN_DAG
pdn_dag_subnet_cidr: 10.5.0.0/24
#pdn_dag_ip_range: 10.5.0.128/26
pdn_dag_ip_range:
- '10.5.0.128-10.5.0.191'
pdn_dag_net_sw_dist: true
pgw_dag_net: network_PGW_DAG
pgw_dag_subnet_cidr: 10.6.0.0/24
#pgw_dag_ip_range: 10.6.0.128/26
pgw_dag_ip_range:
- '10.6.0.128-10.6.0.191'
pgw_dag_net_sw_dist: true
bgp_dag_pgw_peer_ip: 10.4.0.1
bgp_vnf_pgw_peer_ip: 10.6.0.1
bgp_pgw_peer_as: '65001'
bgp_dag_egw_peer_ip: 10.3.0.1
bgp_egw_peer_as: '65002'
default_gateway: 10.5.0.1 #PDN_DAG Default Gateway
## ACCESS CONFIG ##
manager_mgmt_host: 10.0.0.106
## DEVICE CONFIG ##
sw_ref_nagios:
data:
template: Centos7-GenericCloud
configuration: quadcpu
revision: 0
sw_ref_dag:
data:
template: BIGIP-13.1.0.5-0.0.5
configuration: quadcpu
revision: 0
sw_ref_vnf:
data:
template: BIGIP-13.1.0.5-0.0.5
configuration: quadcpu
revision: 0
## BIGIP LICENSING ##
big_iq_host: 10.0.0.105
big_iq_lic_pool: BIGIP_1
# VNF Resource Information Collector
ric_purchasing_model: subscription
ric_vnfm_serial: "12345"
auto_last_hop: "disabled"
## GiLAN SETTINGS (MAY IMPACT VNFM PERFORMANCE)##
max_scale_dag_group: '10' # Max instances of DAG VE
max_scale_vnf_group: '10' # Max instances of VNF Layers
max_heal_vnfd_dag_ve: '10' # Max number of 'instances' that can be created during heal
max_heal_vnf_layer: '10'
max_heal_vnf_slave_ve: '10'
vnf_layer_cpu_threshold: '85'
vnf_layer_cpu_threshold_check_interval: '1'
vnf_group_throughput: 20
vnf_group_throughput_threshold: 75
vnf_group_throughput_check_interval: 1
dag_group_cpu_threshold: '89'
dag_group_cpu_threshold_check_interval: '1'
# Common inputs
bigip_ssh_key: key_name
vnf_as3_nsd_payload:
class: ADC
schemaVersion: 3.0.0
id: cfy_vnf_01
label: vnf
remark: VNF
f5vnf:
class: Tenant
Shared:
class: Application
template: shared
lbSelectedRule:
class: iRule
iRule: when LB_SELECTED {log local0. "Selected server [LB::server]"}
remark: Log load balanced server
policyEnforcement:
allTransactions: False
class: Enforcement_Policy
enable: True
rules:
- name: testPolicyRule1
precedence: 1
modifyHttpHeader:
headerName: myHeaderName
operation: insert
valueContent: myHeaderValue
valueType: string
tcpAnalyticsEnabled: True
tcpOptimizationDownlink:
use: profileTcpClient
tcpOptimizationUplink:
use: profileTcpServer
- name: testPolicyRule2
precedence: 1
dscpMarkingDownlink: 0
dscpMarkingUplink: 0
classificationFilters:
- application:
bigip: /Common/acrobat
invertMatch: True
name: testClassFilter1
- category:
bigip: /Common/Audio
invertMatch: True
name: testClassFilter2
gateStatusEnabled: True
policyEnforcementDefault:
class: Enforcement_Policy
rules:
- name: enforcementPolicyRuleDefault
precedence: 10
profileClassification:
class: Classification_Profile
preset:
bigip: /Common/ce_pem
profileIPOther:
class: IP_Other_Profile
profileSpm:
class: Enforcement_Profile
connectionOptimizationEnabled: True
policiesGlobalHighPrecedence:
- use: policyEnforcement
policiesUnknownSubscribers:
- use: policyEnforcementDefault
profileSubscriberManagement:
class: Enforcement_Subscriber_Management_Profile
serverSideSessionsEnabled: True
profileTcpClient:
autoProxyBufferSize: True
autoReceiveWindowSize: True
autoSendBufferSize: True
class: TCP_Profile
congestionControl: woodside
earlyRetransmit: True
enhancedLossRecovery: True
fastOpen: True
fastOpenCookieExpiration: 21600
idleTimeout: 300
initCwnd: 16
initRwnd: 16
maxSegmentSize: 0
minimumRto: 1000
mptcp: passthrough
proxyBufferHigh: 262144
proxyBufferLow: 196608
proxyMSS: True
receiveWindowSize: 131072
sendBufferSize: 262144
synRtoBase: 3000
tailLossProbe: True
verifiedAccept: False
profileTcpServer:
autoProxyBufferSize: True
autoReceiveWindowSize: True
autoSendBufferSize: True
class: TCP_Profile
congestionControl: woodside
earlyRetransmit: True
enhancedLossRecovery: True
fastOpen: True
fastOpenCookieExpiration: 21600
idleTimeout: 300
initCwnd: 16
initRwnd: 16
maxSegmentSize: 0
minimumRto: 1000
mptcp: passthrough
proxyBufferHigh: 262144
proxyBufferLow: 196608
proxyMSS: True
receiveWindowSize: 131072
sendBufferSize: 262144
synRtoBase: 3000
tailLossProbe: True
verifiedAccept: False
profileL4:
class: L4_Profile
serviceAddress:
class: Service_Address
arpEnabled: False
icmpEcho: disable
spanningEnabled: True
virtualAddress: 0.0.0.0
gilan_any:
class: Application
template: generic
serviceMain:
allowVlans:
- bigip: /Common/network_PGW_DAG
class: Service_Generic
iRules:
- /f5vnf/Shared/lbSelectedRule
layer4: any
profileClassification:
use: /f5vnf/Shared/profileClassification
profileIPOther:
use: /f5vnf/Shared/profileIPOther
profileL4:
use: /f5vnf/Shared/profileL4
profileSubscriberManagement:
use: /f5vnf/Shared/profileSubscriberManagement
snat: none
lastHop: disable
translateServerAddress: False
translateServerPort: False
virtualAddresses:
- use: /f5vnf/Shared/serviceAddress
virtualPort: 0
gilan_tcp:
class: Application
template: tcp
serviceMain:
allowVlans:
- bigip: /Common/network_PGW_DAG
class: Service_TCP
iRules:
- /f5vnf/Shared/lbSelectedRule
layer4: tcp
profileClassification:
use: /f5vnf/Shared/profileClassification
profileL4:
use: /f5vnf/Shared/profileL4
profileTCP:
bigip: /Common/f5-tcp-mobile
profileSubscriberManagement:
use: /f5vnf/Shared/profileSubscriberManagement
snat: none
lastHop: disable
translateServerAddress: False
translateServerPort: False
virtualAddresses:
- use: /f5vnf/Shared/serviceAddress
virtualPort: 0
gilan_udp:
class: Application
template: udp
serviceMain:
allowVlans:
- bigip: /Common/network_PGW_DAG
class: Service_UDP
iRules:
- /f5vnf/Shared/lbSelectedRule
layer4: udp
profileClassification:
use: /f5vnf/Shared/profileClassification
profileL4:
use: /f5vnf/Shared/profileL4
profileSubscriberManagement:
use: /f5vnf/Shared/profileSubscriberManagement
profileUDP:
bigip: /Common/udp_decrement_ttl
snat: none
lastHop: disable
translateServerAddress: False
translateServerPort: False
virtualAddresses:
- use: /f5vnf/Shared/serviceAddress
virtualPort: 0
gilan_http:
class: Application
template: http
serviceMain:
allowVlans:
- bigip: /Common/network_PGW_DAG
class: Service_HTTP
iRules:
- /f5vnf/Shared/lbSelectedRule
layer4: tcp
profileClassification:
use: /f5vnf/Shared/profileClassification
profileHTTP:
bigip: /Common/http-transparent
profileL4:
use: /f5vnf/Shared/profileL4
profileSubscriberManagement:
use: /f5vnf/Shared/profileSubscriberManagement
profileTCP:
bigip: /Common/f5-tcp-mobile
snat: none
lastHop: disable
translateServerAddress: False
translateServerPort: False
virtualAddresses:
- use: /f5vnf/Shared/serviceAddress
virtualPort: 80
gilan_inbound:
class: Application
template: generic
serviceMain:
allowVlans:
- bigip: /Common/network_PDN_DAG
class: Service_Generic
iRules:
- /f5vnf/Shared/lbSelectedRule
layer4: any
profileL4:
use: /f5vnf/Shared/profileL4
profileSubscriberManagement:
use: /f5vnf/Shared/profileSubscriberManagement
snat: none
translateServerAddress: False
translateServerPort: False
virtualAddresses:
- use: /f5vnf/Shared/serviceAddress
virtualPort: 0