[eduVPN-deploy] eduVPN v3 questions: multiple profile setup, Shibboleth impact on access to node-api.php, NAT using node IP

François Kooman fkooman at deic.dk
Mon Sep 19 11:55:06 CEST 2022


On 14.09.22 16:16, François Kooman via eduVPN-deploy wrote:
> Made a little progress there, see issue. So I think we should soon have 
> something that will work for deploying profiles only on some nodes.
> 
> It is not perfect, we'll need to keep existing deployments work, 
> otherwise I could have reworked it a bit more clever, but alas we'll 
> have to deal with it somehow.

The solution now chosen is that _per profile_ you can specify which 
node(s), by its "nodeNumber"(s) it is deployed using the 'onNode' 
configuration option, e.g.:

     'ProfileList' => [
         [
             'onNode' => [2,3],
             'profileId' => 'default',
             'displayName' => 'Default',
             'hostName' => 'vpn.example',
             'dnsServerList' => ['9.9.9.9', '2620:fe::fe'],
             'wRangeFour' => '10.43.43.0/24',
             'wRangeSix' => 'fd43::/64',
             'oRangeFour' => '10.42.42.0/24',
             'oRangeSix' => 'fd42::/64',
         ],
     ],

Performing some last minute testing and will push it to v3 branch 
shortly and then hopefully later this week a 3.0.6 release.

Regards,
François



More information about the eduVPN-deploy mailing list