From ae032bdf35079c206429b5f59813c4b34bd00ff3 Mon Sep 17 00:00:00 2001 From: Simon Marsh Date: Mon, 20 Jun 2022 09:24:25 +0100 Subject: [PATCH] Update diagrams --- content/network/design.md | 7 ++++--- static/design/DN42-Core.svg | 2 +- static/design/DN42-Host.svg | 2 +- static/design/DN42-Tunnels.svg | 2 +- 4 files changed, 7 insertions(+), 6 deletions(-) diff --git a/content/network/design.md b/content/network/design.md index 737e7cd..270e4da 100644 --- a/content/network/design.md +++ b/content/network/design.md @@ -22,7 +22,8 @@ L2TP also allows for multiple tunnels between hosts and this can also be used to separate low level traffic without incurring the additional overheads of VXLANs (e.g. for NFS cross mounting). -Network configuration on hosts is managed by systemd-networkd. +Network configuration on hosts is managed by systemd-networkd and applied +with Ansible. {{}} Real Life Networks and Fragmentation. @@ -56,7 +57,7 @@ For most networks this is not a problem and generally the approach works very well. However, if you have bandwidth limits with your ISP (e.g. a 100mbit bandwidth -allowance provided on a 1gbit port) packets may be generate at a high bit +allowance provided on a 1gbit port) packets may be generated at a high bit rate and then decimated by the ISP to match the bandwidth allowance. This would normally be fine, but if a fragmented packet is sent, the burst of smaller packets is highly likely to exceed the bandwidth @@ -135,7 +136,7 @@ with all major services being delivered via virtual networks, containers and VMs Hosts have three main functions: - - connecting in to the burble.dn42 IPsec/L2TP mesh and BGP EVPN + - connecting in to the burble.dn42 Wireguard/L2TP mesh and BGP EVPN - providing internal bridges for virtual networks - hosting [LXD](https://linuxcontainers.org/lxd/introduction/) containers and VMs diff --git a/static/design/DN42-Core.svg b/static/design/DN42-Core.svg index fe4158c..137c3a6 100644 --- a/static/design/DN42-Core.svg +++ b/static/design/DN42-Core.svg @@ -1,4 +1,4 @@ -
Bird2
Bird2
Bird2
Bird2
Bird2
Bird2
Bird2
Bird2
Bird2
Bird2
Bird2
Bird2
Bird2
Bird2
Route Reflectors
Route Reflectors
dn42 routers
dn42 routers
MTU 4260
MTU 42...
MTU 1420 / various
MTU 1420 / various
dn42 peers
Wireguard
OVPN
dn42 peers...
Injected Tunnels
Injected...
Host Bridges
Host Br...
dn42 router lxd
dn42 rout...
svcs
svcs
svcs
svcs
svcs
svcs
svcs
svcs
tier1
public services
tier1...
tier2
internal services
tier2...
nftables
nftab...
MTU 4260
MTU 4260
dmz
dmz
dn42 VXLAN
dn42 VXLAN
Viewer does not support full SVG 1.1
\ No newline at end of file +
Bird2
Bird2
Bird2
Bird2
Bird2
Bird2
Bird2
Bird2
Bird2
Bird2
Bird2
Bird2
Bird2
Bird2
Route Reflectors
Route Reflectors
dn42 routers
dn42 routers
MTU 4260
MTU 42...
MTU 1420 / various
MTU 1420 / various
dn42 peers
Wireguard
OVPN
dn42 peers...
Injected Tunnels
Injected...
Host Bridges
Host Bri...
dn42 router lxd
dn42 rout...
svcs
svcs
svcs
svcs
svcs
svcs
svcs
svcs
tier1
public services
tier1...
tier2
internal services
tier2...
nftables
nftab...
MTU 4260
MTU 4260
dmz
dmz
dn42 VXLAN
dn42 VXLAN
Text is not SVG - cannot display
\ No newline at end of file diff --git a/static/design/DN42-Host.svg b/static/design/DN42-Host.svg index 3bf4ab5..57bcdd3 100644 --- a/static/design/DN42-Host.svg +++ b/static/design/DN42-Host.svg @@ -1,4 +1,4 @@ -
Internet
Internet
IPSec/L2TP Tunnels
IPSec/L2TP Tunnels
VXLAN Endpoints
VXLAN Endpoints
host managed
networking
host managed...
Host Bridges
Host Bridges
dn42 router
dn42 router
dn42 service
dn42 service
dn42 service
dn42 service
non-dn42
non-dn42
dn42 tier1
dn42 tier1
dn42 tier2
dn42 tier2
direct clearnet access
direct clearnet access
dn42 routing VXLAN
dn42 routing VXLAN
dn42 peers
dn42 peers
tunnel injection
tunnel injection
FRR
FRR
nftables
nftables
Viewer does not support full SVG 1.1
\ No newline at end of file +
Internet
Internet
Wireguard/L2TP Tunnels
Wireguard/L2TP Tunnels
VXLAN Endpoints
VXLAN Endpoints
host managed
networking
host managed...
Host Bridges
Host Bridges
dn42 router
dn42 router
dn42 service
dn42 service
dn42 service
dn42 service
non-dn42
non-dn42
dn42 tier1
dn42 tier1
dn42 tier2
dn42 tier2
direct clearnet access
direct clearnet access
dn42 routing VXLAN
dn42 routing VXLAN
dn42 peers
dn42 peers
tunnel injection
tunnel injection
FRR
FRR
nftables
nftables
Text is not SVG - cannot display
\ No newline at end of file diff --git a/static/design/DN42-Tunnels.svg b/static/design/DN42-Tunnels.svg index f8213b2..df5e7cb 100644 --- a/static/design/DN42-Tunnels.svg +++ b/static/design/DN42-Tunnels.svg @@ -1,4 +1,4 @@ -
IPSec/L2TP
Mesh
IPSec/L2TP...
MTU 4310
MTU 4310
Wireguard
Wireguard
MTU 4310
MTU 4310
Viewer does not support full SVG 1.1
\ No newline at end of file +
Wireguard/L2TP
Mesh
Wireguard/L2TP...
MTU 4310
MTU 4310
Wireguard
Wireguard
MTU 4310
MTU 4310
Text is not SVG - cannot display
\ No newline at end of file