Trending September 2023 # How Does Ansible Iptables Works? # Suggested October 2023 # Top 9 Popular

You are reading the article How Does Ansible Iptables Works? updated in September 2023 on the website Speedmintonvn.com. We hope that the information we have shared is helpful to you. If you find the content interesting and meaningful, please share it with your friends and continue to follow and support us for the latest updates. Suggested October 2023 How Does Ansible Iptables Works?

Introduction to Ansible Iptables

Web development, programming languages, Software testing & others

In this article, we will learn about Ansible Iptables and see some practical implementations of it.

Explaining the Ansible Iptables

Ansible Iptables module is the same as you use Linux commands iptables and ip6tables because internally, it invokes those commands while executing any task on remote target machines. Like any other Ansible module, we have a set of parameters, their acceptance, and default values in this Ansible module. You must use a combination of these to create a required rule. Also, you shall be wary of the default values as you might not be mentioning all parameters in a play or task, but due to the default behavior of a parameter, it will anyway be realized and applied. So, do remember these when using the Ansible Iptables module.

action: –available options are appended and insert. The default is to decide whether to insert on top or append at the bottom.

chain: –This is to tell which iptables chain will be modified.

destination: –This is to specify the destination in a rule; this can be an IP, hostname, network range, etc.

destination_port: –This is to specify the destination or destination port range. Acceptable values are port numbers as well as the service name.

uid_owner: – This is to tell which user to use when doing a match in the owner rule.

to_source: – This is to specify the source to be used.

to_ports: – This is to specify the destination port range or a destination port.

to_destination: –This specified the destination address to use.

table: –Acceptable values are filter, nat, mangle, raw, and security. This is to specify the packet matching table on which command will work on. The default filters.

state: –Acceptable values are absent and present. The default is present. This is to specify whether to add or remove a rule.

src_range: –This is to specify the source IP range to match.

source: –This is to specify a source that can be an IP, hostname, network range, etc.

source_port: –This is to specify the source or source port range. Acceptable values are port numbers as well as the service name.

rule_num: –To specify the number at which to Insert the rule. This works with action=insert.

reject_with:-To specify the error when rejecting a package.

protocol: –This is to specify the packet or protocol to check. This can be tcp, udp, icmp, esp, ah, udplite, sctpor

policy: –Acceptable values are ACCEPT, DROP, QUEUE, and RETURN. This is to set the policy for the given target.

out_interface: –This is to specify the interface via which a packet will be sent.

match: –

log_prefix: –This is to specify a log text for the rule.

ip_version: – whether IPv4 or IPv6

in_interface: –This is to specify the interface via which a packet will be received.

gateway: –This is to specify the IP address where to send cloned packets. This only works when the JUMP parameter is set to TEE.

Jump: – This is to specify what shall be done when the packet matches a rule.

flush: –This is to specify the table and rule chains to be flushed. If nothing is specified, then all tables will be flushed.

How Does Ansible Iptables Works?

become: yes

In the next section, we will see some practical examples and their real-time usage. Also, by seeing the output of playbooks, we will try to understand how it works.

Examples of Ansible Iptables

First, let me introduce you to our lab environment. We have an Ansible controller node named ansible-controller. Also, as target remote machines, we have one Linux-based node named as host-one. We will run the Ansible command and playbooks on the Ansible control node ansible-controller and try to do changes on the target remote machine.

var: var_output_1.stdout_lines

Now running it like below: –

Now in the below output, you can see the iptables before and after. After the rule setup, we have all packages dropped from this IP.

Conclusion

As we saw in this article, Ansible Iptables is an important module that enables you to work on iptables remotely via Ansible. But you must only use it when you have good knowledge of Linux firewall and Ansible iptables; otherwise, you will end up in a mess of firewall rules and tables. So learn it first and then use it.