zerwes

#!/bin/sh

# based on https://github.com/OpenVPN/openvpn/blob/master/contrib/OCSP_check/OCSP_check.sh
# for testing ocsp support in openvpn @ opnsense

# OCSP responder URL (mandatory)
# you can extract this from the cert ...
ocsp_url=`openssl x509 -in /var/etc/openvpn/server${1}.ca -noout -ocsp_uri`

# CA CERTIFICATE

zerwes

Wireguard + VXLAN demo

Scripts to confgire a group of hosts on a LAN to use VXLAN over Wireguard.

Wireguard routing

• Making your own private Internet
• VXLAN & Linux
• Bridge vs Macvlan
• iproute2 bridging

zerwes

# ansible-playbook -D testxmlemptytag.yml

PLAY [localhost] ************************************************************************************************************************************************************

TASK [Gathering Facts] ******************************************************************************************************************************************************
ok: [127.0.0.1]

TASK [ansible.builtin.copy] *************************************************************************************************************************************************
changed: [127.0.0.1]

zerwes

# Monitoring on interface eth0
tcpdump -i eth0 -n port 67 and port 68

zerwes

People

:bowtie:	😄 :smile:	😆 :laughing:
😊 :blush:	😃 :smiley:	☺️ :relaxed:
😏 :smirk:	😍 :heart_eyes:	😘 :kissing_heart:
😚 :kissing_closed_eyes:	😳 :flushed:	😌 :relieved:
😆 :satisfied:	😁 :grin:	😉 :wink:
😜 :stuck_out_tongue_winking_eye:	😝 :stuck_out_tongue_closed_eyes:	😀 :grinning:
😗 :kissing:	😙 :kissing_smiling_eyes:	😛 :stuck_out_tongue:

zerwes

frontend front_https
  acl network_allowed src 100.111.222.100
  acl host_www hdr(host) -i zero-sys.net
  http-request deny if host_www !network_allowed