A. F. DudleyandClaude Opus 4.6 68edcc60c7 fix: migrate ashburn relay playbook to firewalld + iptables coexistence ...

Firewalld zones/policies for forwarding (Docker bridge → gre-ashburn),
iptables for Docker-specific rules (DNAT, DOCKER-USER, mangle, SNAT).
Both coexist at different netfilter priorities.

See docs/postmortem-ashburn-relay-outbound.md for root cause analysis.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-10 05:54:08 +00:00

..

files

fix: migrate ashburn relay playbook to firewalld + iptables coexistence

2026-03-10 05:54:08 +00:00

ashburn-relay-biscayne.yml

fix: migrate ashburn relay playbook to firewalld + iptables coexistence

2026-03-10 05:54:08 +00:00

ashburn-relay-check.yml

fix: inventory layering — playbooks use hosts:all, cross-inventory uses explicit hosts

2026-03-07 22:28:21 +00:00

ashburn-relay-mia-sw01.yml

fix: VRF isolation for mia-sw01 relay, TCP dport mangle for ip_echo

2026-03-07 23:31:18 +00:00

ashburn-relay-was-sw01.yml

fix: inventory layering — playbooks use hosts:all, cross-inventory uses explicit hosts

2026-03-07 22:28:21 +00:00

biscayne-iptables.yml

feat: add iptables playbook, symlink snapshot-download.py to agave-stack

2026-03-08 19:11:24 +00:00

biscayne-migrate-storage.yml

fix: migration playbook stops docker first, skips stale data copy

2026-03-10 00:48:37 +00:00

biscayne-prepare-agave.yml

fix: switch ramdisk from /dev/ram0 to tmpfs, refactor snapshot-download.py

2026-03-08 18:43:41 +00:00

biscayne-recover.yml

fix: recovery playbook fixes grafana PV ownership before scale-up

2026-03-10 00:57:36 +00:00

biscayne-redeploy.yml

fix: remove Ansible snapshot download, add sync-tools playbook

2026-03-09 05:14:43 +00:00

biscayne-start.yml

fix: remove Ansible snapshot download, add sync-tools playbook

2026-03-09 05:14:43 +00:00

biscayne-stop.yml

feat: graceful shutdown, ZFS upgrade, storage migration, sync-tools build

2026-03-09 07:58:37 +00:00

biscayne-sync-tools.yml

feat: graceful shutdown, ZFS upgrade, storage migration, sync-tools build

2026-03-09 07:58:37 +00:00

biscayne-upgrade-zfs.yml

fix: migration playbook stops docker first, skips stale data copy

2026-03-10 00:48:37 +00:00

connect-doublezero-multicast.yml

fix: inventory layering — playbooks use hosts:all, cross-inventory uses explicit hosts

2026-03-07 22:28:21 +00:00

fix-pv-mounts.yml

fix: ansible-lint production profile compliance for all playbooks

2026-03-07 10:52:40 +00:00

health-check.yml

fix: switch ramdisk from /dev/ram0 to tmpfs, refactor snapshot-download.py

2026-03-08 18:43:41 +00:00

relay-inbound-udp-test.yml

fix: DOCKER-USER rules for inbound relay, add UDP test playbooks

2026-03-08 02:43:31 +00:00

relay-link-test.yml

fix: DOCKER-USER rules for inbound relay, add UDP test playbooks

2026-03-08 02:43:31 +00:00