Archived

1 Fork 3

This repository has been archived on 2026-04-02. You can view files and clone it. You cannot open issues or pull requests or push a commit.

T

A. F. DudleyandClaude Opus 4.6 05f9acf8a0 fix: DOCKER-USER rules for inbound relay, add UDP test playbooks

Root cause: Docker FORWARD chain policy DROP blocked all DNAT'd relay
traffic (UDP/TCP 8001, UDP 9000-9025) to the kind node. The DOCKER
chain only ACCEPTs specific TCP ports (6443, 443, 80). Added ACCEPT
rules in DOCKER-USER chain which runs before all Docker chains.

Changes:
- ashburn-relay-biscayne.yml: add DOCKER-USER ACCEPT rules (inbound
  tag) and rollback cleanup
- ashburn-relay-setup.sh.j2: persist DOCKER-USER rules across reboot
- relay-inbound-udp-test.yml: controlled e2e test — listener in kind
  netns, sender from kelce, assert arrival
- relay-link-test.yml: link-by-link tcpdump captures at each hop
- relay-test-udp-listen.py, relay-test-udp-send.py: test helpers
- relay-test-ip-echo.py: full ip_echo protocol test
- inventory/kelce.yml, inventory/panic.yml: test host inventories
- test-ashburn-relay.sh: add ip_echo UDP reachability test

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-08 02:43:31 +00:00

ashburn-relay-lab

chore: add containerlab topologies for relay testing

2026-03-07 22:30:03 +00:00

docs

docs: document DoubleZero agent managed config on both switches

2026-03-07 23:45:36 +00:00

inventory

fix: DOCKER-USER rules for inbound relay, add UDP test playbooks

2026-03-08 02:43:31 +00:00

inventory-switches

fix: separate switch inventory to prevent accidental targeting