managing a growing fleet of wifi routers combining openwrt, … · 2019-07-04 · 03/07/19...
TRANSCRIPT
![Page 1: Managing a growing fleet of WiFi routers combining OpenWRT, … · 2019-07-04 · 03/07/19 Presentation 3 Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt](https://reader033.vdocument.in/reader033/viewer/2022042200/5e9f2f065bf85a7205003ecf/html5/thumbnails/1.jpg)
03/07/19 Presentation 1
Managing a growing fleet of WiFi routers combining
OpenWRT, WireGuard, Salt and Zabbix
Kenan Ibrović
![Page 2: Managing a growing fleet of WiFi routers combining OpenWRT, … · 2019-07-04 · 03/07/19 Presentation 3 Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt](https://reader033.vdocument.in/reader033/viewer/2022042200/5e9f2f065bf85a7205003ecf/html5/thumbnails/2.jpg)
Presentation 203/07/19
Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix
● Problems● Requirements● Toolset● Issues and difficulties (+solutions)● Future plans
![Page 3: Managing a growing fleet of WiFi routers combining OpenWRT, … · 2019-07-04 · 03/07/19 Presentation 3 Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt](https://reader033.vdocument.in/reader033/viewer/2022042200/5e9f2f065bf85a7205003ecf/html5/thumbnails/3.jpg)
Presentation 303/07/19
Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix
What do you do when you have 20 routers in a different country with no techie there and
ISP you don’t trust?
![Page 4: Managing a growing fleet of WiFi routers combining OpenWRT, … · 2019-07-04 · 03/07/19 Presentation 3 Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt](https://reader033.vdocument.in/reader033/viewer/2022042200/5e9f2f065bf85a7205003ecf/html5/thumbnails/4.jpg)
Presentation 403/07/19
Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix
● Requirements:● Secure communication● Easy deployment● Easy management● Robustness
![Page 5: Managing a growing fleet of WiFi routers combining OpenWRT, … · 2019-07-04 · 03/07/19 Presentation 3 Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt](https://reader033.vdocument.in/reader033/viewer/2022042200/5e9f2f065bf85a7205003ecf/html5/thumbnails/5.jpg)
Presentation 503/07/19
Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix
TOOLS
![Page 6: Managing a growing fleet of WiFi routers combining OpenWRT, … · 2019-07-04 · 03/07/19 Presentation 3 Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt](https://reader033.vdocument.in/reader033/viewer/2022042200/5e9f2f065bf85a7205003ecf/html5/thumbnails/6.jpg)
Presentation 603/07/19
Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix
● OpenWRT● 3000+ packages available● Regular updates● Open Source
![Page 7: Managing a growing fleet of WiFi routers combining OpenWRT, … · 2019-07-04 · 03/07/19 Presentation 3 Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt](https://reader033.vdocument.in/reader033/viewer/2022042200/5e9f2f065bf85a7205003ecf/html5/thumbnails/7.jpg)
Presentation 703/07/19
Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix
● WireGuard
● Remote access● Encrypted connection● Easy to use
![Page 8: Managing a growing fleet of WiFi routers combining OpenWRT, … · 2019-07-04 · 03/07/19 Presentation 3 Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt](https://reader033.vdocument.in/reader033/viewer/2022042200/5e9f2f065bf85a7205003ecf/html5/thumbnails/8.jpg)
Presentation 803/07/19
Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix
● SaltStack● Execute commands across all managed
systems● Scalable● Secure● Standardize
![Page 9: Managing a growing fleet of WiFi routers combining OpenWRT, … · 2019-07-04 · 03/07/19 Presentation 3 Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt](https://reader033.vdocument.in/reader033/viewer/2022042200/5e9f2f065bf85a7205003ecf/html5/thumbnails/9.jpg)
Presentation 903/07/19
Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix
● States● Design system configurations● One state for all devices● wifi.sls
salt-ssh ‘*’ state.apply wifi
![Page 10: Managing a growing fleet of WiFi routers combining OpenWRT, … · 2019-07-04 · 03/07/19 Presentation 3 Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt](https://reader033.vdocument.in/reader033/viewer/2022042200/5e9f2f065bf85a7205003ecf/html5/thumbnails/10.jpg)
Presentation 1003/07/19
Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix
nodegroup:
pass-the-salt:
- router-1
- router-2
- router-n
salt-ssh -N pass-the-salt state.apply wifi
![Page 11: Managing a growing fleet of WiFi routers combining OpenWRT, … · 2019-07-04 · 03/07/19 Presentation 3 Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt](https://reader033.vdocument.in/reader033/viewer/2022042200/5e9f2f065bf85a7205003ecf/html5/thumbnails/11.jpg)
Presentation 1103/07/19
Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix
● Pillars● Makes states reusable● Store credentials, variables...
non-filtered.slswifi_ssid: Pass The Saltwifi_pass: newsecretpass
filtered.slswifi_ssid: Pass The Salt Filteredwifi_pass: secretpass
![Page 12: Managing a growing fleet of WiFi routers combining OpenWRT, … · 2019-07-04 · 03/07/19 Presentation 3 Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt](https://reader033.vdocument.in/reader033/viewer/2022042200/5e9f2f065bf85a7205003ecf/html5/thumbnails/12.jpg)
Presentation 1203/07/19
Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix
● Zabbix
![Page 13: Managing a growing fleet of WiFi routers combining OpenWRT, … · 2019-07-04 · 03/07/19 Presentation 3 Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt](https://reader033.vdocument.in/reader033/viewer/2022042200/5e9f2f065bf85a7205003ecf/html5/thumbnails/13.jpg)
Presentation 1303/07/19
Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix
● OpenVPN● All connected devices on VPN● One account
![Page 14: Managing a growing fleet of WiFi routers combining OpenWRT, … · 2019-07-04 · 03/07/19 Presentation 3 Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt](https://reader033.vdocument.in/reader033/viewer/2022042200/5e9f2f065bf85a7205003ecf/html5/thumbnails/14.jpg)
Presentation 1403/07/19
Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix
Issues and difficulties
(+solutions)
![Page 15: Managing a growing fleet of WiFi routers combining OpenWRT, … · 2019-07-04 · 03/07/19 Presentation 3 Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt](https://reader033.vdocument.in/reader033/viewer/2022042200/5e9f2f065bf85a7205003ecf/html5/thumbnails/15.jpg)
Presentation 1503/07/19
Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix
● Salt client (minion) on OpenWRT?● None● Salt-ssh
![Page 16: Managing a growing fleet of WiFi routers combining OpenWRT, … · 2019-07-04 · 03/07/19 Presentation 3 Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt](https://reader033.vdocument.in/reader033/viewer/2022042200/5e9f2f065bf85a7205003ecf/html5/thumbnails/16.jpg)
Presentation 1603/07/19
Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix
● Limited space on the flash memory?● USB flash drive● Exroot configuration● Automated (install_requirements.sh)
![Page 17: Managing a growing fleet of WiFi routers combining OpenWRT, … · 2019-07-04 · 03/07/19 Presentation 3 Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt](https://reader033.vdocument.in/reader033/viewer/2022042200/5e9f2f065bf85a7205003ecf/html5/thumbnails/17.jpg)
Presentation 1703/07/19
Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix
● OSError: Cannot locate OpenSSL libcrypto● Python can’t find it● fix_oserror.sh
![Page 18: Managing a growing fleet of WiFi routers combining OpenWRT, … · 2019-07-04 · 03/07/19 Presentation 3 Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt](https://reader033.vdocument.in/reader033/viewer/2022042200/5e9f2f065bf85a7205003ecf/html5/thumbnails/18.jpg)
Presentation 1803/07/19
Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix
● Firmware upgrade● Removes ALL user installed packages (no
WireGuard)● Keeps configuration (there is hope)● upgrade.sls
![Page 19: Managing a growing fleet of WiFi routers combining OpenWRT, … · 2019-07-04 · 03/07/19 Presentation 3 Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt](https://reader033.vdocument.in/reader033/viewer/2022042200/5e9f2f065bf85a7205003ecf/html5/thumbnails/19.jpg)
Presentation 1903/07/19
Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix
● Configuration messed up!!!● Remove USB flash drive● Reboot● Plug it back in● Run install_requirements.sh
![Page 20: Managing a growing fleet of WiFi routers combining OpenWRT, … · 2019-07-04 · 03/07/19 Presentation 3 Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt](https://reader033.vdocument.in/reader033/viewer/2022042200/5e9f2f065bf85a7205003ecf/html5/thumbnails/20.jpg)
Presentation 2003/07/19
Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix
● setup.sh● wireguard-config.conf● router_config.sh
– Change password– Install and configure WireGuard
● install_requirements.sh– Exroot configuration– fix_oserror.sh– salt-ssh $SALT_NAME state.apply
![Page 21: Managing a growing fleet of WiFi routers combining OpenWRT, … · 2019-07-04 · 03/07/19 Presentation 3 Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt](https://reader033.vdocument.in/reader033/viewer/2022042200/5e9f2f065bf85a7205003ecf/html5/thumbnails/21.jpg)
Presentation 2103/07/19
Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix
● Future plans:● QoS● Outline VPN
![Page 22: Managing a growing fleet of WiFi routers combining OpenWRT, … · 2019-07-04 · 03/07/19 Presentation 3 Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt](https://reader033.vdocument.in/reader033/viewer/2022042200/5e9f2f065bf85a7205003ecf/html5/thumbnails/22.jpg)
Presentation 2203/07/19
Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix
● [email protected]● [email protected]● https://tech.occrp.org● Git: https://git.occrp.org/libre/salt-routers
img sources:● Router icons: https://findicons.com/files/icons/2652/gentleface/48/wifi_router_icon.png
● Server icon: https://findicons.com/files/icons/2652/gentleface/48/wifi_router_icon.png
● Salt master-minion icon: https://docs.saltstack.com/en/getstarted/images/basic-comm.png
![Page 23: Managing a growing fleet of WiFi routers combining OpenWRT, … · 2019-07-04 · 03/07/19 Presentation 3 Managing a growing fleet of WiFi routers combining OpenWRT, WireGuard, Salt](https://reader033.vdocument.in/reader033/viewer/2022042200/5e9f2f065bf85a7205003ecf/html5/thumbnails/23.jpg)
03/07/19 Presentation 23
Thank You!