I am currently looking into ansibles to store my configurations and deploy services more easily.

I have couple of iptable rules in /etc/iptables/rules.v4, which I can easily restore. Meanwhile, ansible has iptable role for configurations - hence, I am confused on what approach to take.

How do I persist this rules, especially across reboots? Should I rerun ansible every time on each reboot? I am at loss on how to best manage iptables, as other services can interact with it. How do you folks handle this? Thanks in advance!

  • Matt The Horwood@lemmy.horwood.cloudEnglish
    4·
    14 days ago

    I have used both, can tell you that a template file of /etc/iptables/rules.v4 with iptables-persistent is the easiest way.

    if you go the full IaC route and have vars for the rules, remember to get iptables to save its state after you have applied your rules

    • someacnt@sh.itjust.worksOPEnglish
      1·
      14 days ago

      Thank you! Templating rules.v4 is a pretty attractive option. Though my VPS has some portions of the file which should be unmodified, so I would have to avoid this method.