Hi,
Apart from using opscode/37signals iptables cookbook, is there any
other experience of managing iptables with chef?
Thanks
Jacobo García López de Araujo
blog: http://robotplaysguitar.com
http://workingwithrails.com/person/13395-jacobo-garc-a
On 21 July 2010 15:57, Jacobo García jacobo.garcia@gmail.com wrote:
Apart from using opscode/37signals iptables cookbook, is there any
other experience of managing iptables with chef?
I implemented a cookbook using node attributes to define firewall
rules at one point, but ended up not using it because it seemed to
overcomplicate matters for the infrastructure I eventually settled on.
It did work quite well for an environment where all traffic is routed
through a single machine and NATed though, allow nodes to specify the
ports and IP addresses they wanted forwarded to them.