summaryrefslogtreecommitdiff
path: root/meta-google/recipes-google/ncsi/files/50-gbmc-ncsi.rules.in
AgeCommit message (Collapse)AuthorFilesLines
2021-09-29meta-google: gbmc-ncsi-config: Derive IP from RAWilliam A. Kennington III1-0/+1
Our end2end DHCP solution is not yet working, but we need a way to derive addresses for a BMC from the smart NIC in front of it. This provides a mechanism for detecting the address from RA beacons the NIC is sending. Change-Id: I0cdc8c192974c0b00257ebe58e911e62636e4c81 Signed-off-by: William A. Kennington III <wak@google.com>
2021-09-29meta-google: gbmc-ncsi-config: Add relay support for the bridgeWilliam A. Kennington III1-0/+6
We may have multiple BMCs running on the internal gbmcbr network via USB links to attached trays. These BMCs do not have a direct connection to the network, and require the NCSI BMC to relay all of their traffic (including DHCP) out opf the machine. This patch enables dhcrelay to run on the NCSI interface and proxy all DHCP traffic from the bridge out of the machine. Change-Id: I60f97ae2d64289c7b706b3d0a6c8fb79a931e485 Signed-off-by: William A. Kennington III <wak@google.com>
2021-05-12meta-google: gbmc-ncsi-nft: More forward restrictionWilliam A. Kennington III1-1/+1
We only want to allow <pfx>::fd... traffic info the machine area network from the outside world. Instead of just blocking internal network addresses from the outside, explicitly look at the prefix. Change-Id: Id0afef7c813aef381e81b8fcfb570778f529f5dc Signed-off-by: William A. Kennington III <wak@google.com>
2021-05-07meta-google: gbmc-systemd-config: Enable packet forwardingWilliam A. Kennington III1-0/+7
This allows gBMCs to route packets, needed for routing packets to the management netowrk. Change-Id: I71f59eeb12607aa9c9d64687fb983938d5d69413 Signed-off-by: William A. Kennington III <wak@google.com>
2021-05-07meta-google: gbmc-ncsi-config: Restrict NCSI input packetsWilliam A. Kennington III1-0/+13
Break down packets by their incoming address and ensure that we don't allow packets to unintended destinations. Right now this is effectively a no-op, but it will be necessary for BMC public addressing. Change-Id: I39c16c3b9cd4c293df42b928674e39677d7834e9 Signed-off-by: William A. Kennington III <wak@google.com>
2021-02-17meta-google: gbmc-ncsi-config: Rename from ncsid-configWilliam A. Kennington III1-0/+14
Make it clear this is a gbmc style configuration, similar to gbmc-systemd-config or gbmc-iperf3. Change-Id: Icd9a2f45f5b399ecb3f8ab1a63d1f0344342ab3a Signed-off-by: William A. Kennington III <wak@google.com>