Hardware
The baremetal nodes are based on ubuntu with the following configuration.
SSH Access
Copy SSH Key to Host
From the local host, copy your public ssh key to the nodes:
ssh-copy-id -i <PATH_TO_SSH_KEY> ubuntu@<HOST_IP>
Disable SSH Password Login
Edit the following options in the sshd config:
...
PermitRootLogin no
PasswordAuthentication no
ChallengeResponseAuthentication no
UsePAM no
service ssh restart
Enable SUDO without password
Edit the following line in the sudoers file:
...
%sudo ALL=(ALL) NOPASSWD:ALL
...
Scramble User Password
The user password is no longer needen.
head -c 500 /dev/urandom | tr -dc 'a-zA-Z0-9~!@#$%^&*_-' | fold -w 24 | head -n 1 | passwd ubuntu --stdin
Keepalived
vrrp_instance VI_API {
state MASTER
interface eth0
virtual_router_id 51
priority 200
advert_int 1
authentication {
auth_type PASS
auth_pass 12345
}
virtual_ipaddress {
10.10.98.10/16
}
}
vrrp_instance VI_API {
state BACKUP
interface eth0
virtual_router_id 51
priority 150
advert_int 1
authentication {
auth_type PASS
auth_pass 12345
}
virtual_ipaddress {
10.10.98.10/16
}
}
BGP
Unifi Router.
ssh 10.20.0.1
configure
set protocols bgp 64512 parameters router-id 10.10.0.1
set protocols bgp 64512 neighbor 10.10.100.11 remote-as 64512
set protocols bgp 64512 neighbor 10.10.100.12 remote-as 64512
set protocols bgp 64512 neighbor 10.10.100.13 remote-as 64512
show protocols bgp
commit
save
exit