stack-orchestrator/playbooks/files
A. F. Dudley 68edcc60c7 fix: migrate ashburn relay playbook to firewalld + iptables coexistence
Firewalld zones/policies for forwarding (Docker bridge → gre-ashburn),
iptables for Docker-specific rules (DNAT, DOCKER-USER, mangle, SNAT).
Both coexist at different netfilter priorities.

See docs/postmortem-ashburn-relay-outbound.md for root cause analysis.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-10 05:54:08 +00:00
..
ashburn-relay-setup.sh.j2 fix: migrate ashburn relay playbook to firewalld + iptables coexistence 2026-03-10 05:54:08 +00:00
ashburn-routing-ifup.sh fix: ashburn relay playbooks and document DZ tunnel ACL root cause 2026-03-07 01:44:25 +00:00
ashburn-routing-ifup.sh.j2 feat: dedicated GRE tunnel (Tunnel100) bypassing DZ-managed Tunnel500 2026-03-07 01:47:58 +00:00