local.m4: Declare network for anycast services.

[firewall] / local.m4

diff --git a/local.m4 b/local.m4
index 5022c4d4b3c7eebcd043033ede4e303c042b817b..3e33b3b3bda5178865938befb9d4e717a916c425 100644 (file)
--- a/local.m4
+++ b/local.m4
@@ -142,6 +142,9 @@ defnet vpn safe
        forwards househub colohub
        host crybaby 1
        host terror 2
        forwards househub colohub
        host crybaby 1
        host terror 2

+defnet anycast trusted
+       addr 172.29.199.224/27 2001:ba8:1d9:0::/64
+       forwards dmz unsafe safe untrusted jump colo vpn

 defnet default untrusted
        addr 62.49.204.144/28 2001:470:1f09:1b98::/64
        addr 212.13.198.64/28 2001:ba8:0:1d9::/64
 defnet default untrusted
        addr 62.49.204.144/28 2001:470:1f09:1b98::/64
        addr 212.13.198.64/28 2001:ba8:0:1d9::/64