inputs_openstack_dns_security_v4.0.0.yaml

datacenter: default

# Network configuration
mgmt_net: mgmt
mgmt_subnet: mgmt-subnet
ctrl_net: control
ctrl_subnet: control-subnet
ha_net: ha_net
ha_subnet: ha-subnet
pgw_net: pgw
pgw_subnet: pgw-subnet
pdn_net: pdn
pdn_subnet: pdn-subnet
pgw_dag_net: pgw_dag
pgw_dag_subnet: pgw_dag-subnet
pdn_dag_net: pdn_dag
pdn_dag_subnet: pdn_dag-subnet

# VNF Resource Information Collector inputs
ric_purchasing_model: subscription
ric_vnfm_serial: "12345"
auto_last_hop: "disabled"

# VNF inputs

# Max number of 'instances' that can be created during scale out
# Max instances of DAG VE
max_scale_dag_group: 10
# Max instances of VNF Layers
max_scale_vnf_group: 10

datacenter: default
# Max number of 'instances' that can be created during heal
max_heal_vnfd_dag_ve: 10
max_heal_vnf_layer: 10
max_heal_vnf_slave_ve: 10

# Nagios inputs
floating_network_id: fa541932-4156-4185-8344-a961cf4c8e41

# VNF Layer scaling inputs
vnf_layer_cpu_threshold: 85
vnf_layer_cpu_threshold_check_interval: 1
# VNF Group scaling inputs
vnf_group_throughput: 20
vnf_group_throughput_threshold: 75
vnf_group_throughput_check_interval: 1
# DAG Group scaling inputs
dag_group_cpu_threshold: 89
dag_group_cpu_threshold_check_interval: 1

## ACCESS CONFIG ##
manager_mgmt_host: 10.0.0.106

# Common inputs
bigip_ssh_key: key_name

ntp_server: 10.0.0.106
timezone: UTC

sw_ref_nagios:
  data:
    image: CentOS-7-x86_64-GenericCloud
    flavor: m1.medium
    availability_zone: nova
  revision: 0
sw_ref_dag:
  data:
    image: BIGIP-14.1.2.3-0.0.5.ALL_1SLOT
    flavor: f5.cloudify_small
    availability_zone: nova
  revision: 0
sw_ref_vnf:
  data:
    image: BIGIP-14.1.2.3-0.0.5.ALL_1SLOT
    flavor: f5.cloudify_medium
    availability_zone: nova
  revision: 0

## BIGIP LICENSING ##
big_iq_host: 10.0.0.121
big_iq_lic_pool: BIGIP_4

ctrl_sg_name: control_sg
mgmt_sg_name: mgmt_sg
pgw_sg_name: pgw_sg
pdn_sg_name: pdn_sg
snmp_sg_name: snmp_sg

bgp_dag_pgw_peer_ip: 10.4.0.1
bgp_vnf_pgw_peer_ip: 10.6.0.1
bgp_pgw_peer_as: 65001
bgp_dag_egw_peer_ip: 10.3.0.1
bgp_egw_peer_as: 65002
default_gateway: 10.5.0.1 #PDN_DAG Default Gateway

# External Database
db_host: localhost
db_name: f5_db
db_user: postgres
db_password: postgres
db_port: 5432
db_sslmode: disable
sw_ref_external_db: {}
mgmt_external_db_ip: ''

vnf_as3_nsd_payload:
  class: ADC
  updateMode: selective
  schemaVersion: 3.26.0
  id: DNS
  DNS_Test:
    class: Tenant
    Shared:
      class: Application
      template: shared
      lbSelectedRule:
        class: iRule
        iRule: when DNS_REQUEST {log local0. "DNS REQUEST"}
        remark: Log load balanced server
      serviceAddress:
        class: Service_Address
        arpEnabled: False
        spanningEnabled: True
        virtualAddress: 0.0.0.0
      dnsProfile:
        class: DNS_Profile
        label: profileDns
        remark: DNS Profile test
        parentProfile:
          bigip: "/Common/dns"
        dnsExpressEnabled: true
        localBindServerEnabled: false
        zoneTransferEnabled: true
        cacheEnabled: true
        cache:
          use: /DNS_Test/Shared/dnsCache
      dnsCache:
        class: DNS_Cache
        type: transparent
        localZones:
          testing.lablocal:
            type: transparent
            records:
            - s1.testing.lablocal 300 IN A 10.9.0.1
            - s2.testing.lablocal 300 IN A 10.9.0.2
            - s3.testing.lablocal 300 IN A 10.9.0.3
            - s4.testing.lablocal 300 IN A 10.9.0.4
    TEST_DNS_Zone:
      class: Application
      template: generic
      test.lab:
        class: DNS_Zone
        label: dnsZone
        remark: DNS Zone test
        dnsExpress:
          enabled: true
          nameserver:
            use: master_dns
          notifyAction: consume
          allowNotifyFrom:
          - 10.7.0.50
          verifyNotifyTsig: false
        responsePolicyEnabled: true
        transferClients:
        - use: slave_dns
      master_dns:
        class: DNS_Nameserver
        address: 10.7.0.50
        port: 53
        routeDomain:
          bigip: "/Common/0"
      slave_dns:
        class: DNS_Nameserver
        address: 10.7.0.51
        port: 53
        routeDomain:
          bigip: "/Common/0"
    dns_resolver:
      class: Application
      template: udp
      serviceMain:
        allowVlans:
        - bigip: /Common/pgw_dag
        class: Service_UDP
        layer4: udp
        profileUDP:
          bigip: /Common/udp
        profileDNS:
          use: /DNS_Test/Shared/dnsProfile
        iRules:
        - /DNS_Test/Shared/lbSelectedRule
        snat: auto
        lastHop: disable
        translateServerAddress: true
        translateServerPort: true
        virtualAddresses:
        - use: /DNS_Test/Shared/serviceAddress
        virtualPort: 0
        pool: dns_pool
      dns_pool:
        class: Pool
        members:
        - servicePort: 53
          serverAddresses:
          - 10.7.0.100