ubika.waap.sysctlprofile (1.0.3) — module

Managed sysctl profiles

| "added in version" 1.0.0 of ubika.waap"

Authors: UBIKA team (@ubika_team)

Install collection

Install with ansible-galaxy collection install ubika.waap:==1.0.3


Add to requirements.yml

  collections:
    - name: ubika.waap
      version: 1.0.3

Description

Manage sysctl profiles

Usage examples

  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- name: Have sysctl profile

  ubika.waap.sysctlprofile:

    credentials:
      host: ubikawaap.local:3001
      username: superadmin
      password: "Denyall@0"
      verify_ssl: false
    name: "test sysctl"
    kernel_shm_max: 2048
    net_ipv4_conf_all_rp_filter: 2
    net_core_optmem_max: 20480
    net_ipv4_tcp_ecn: 2
    net_ipv4_tcp_congestion_control: "cubic"
    net_ipv4_tcp_fack: 1
    net_ipv4_tcp_sack: 1
    net_ipv4_tcp_dsack: 1
    net_ipv4_tcp_timestamps: 1
    net_ipv4_tcp_windows_scaling: 1
    net_ipv4_tcp_adv_win_scale: 1
    net_ipv4_tcp_workaround_signed_windows: 1
    net_ipv4_tcp_syncookies: 1
    net_ipv4_tcp_fin_timeout: 1
    net_ipv4_tcp_keepalive_time: 1
    net_ipv4_tcp_keepalive_intvl: 1
    net_ipv4_tcp_keepalive_probes: 1
    net_ipv4_tcp_tw_reuse: 1
    net_ipv4_tcp_max_tw_buckets: 1

Inputs

    
name:
    description: Name of the sysctl profile.
    required: true
    type: str

state:
    choices:
    - present
    - absent
    default: present
    description:
    - State of the sysctl profile.
    type: str

credentials:
    description:
    - Credentials for UBIKA WAAP Gateway
    required: true
    suboptions:
      host:
        description:
        - UBIKA WAAP Gateway host
        required: true
        type: str
      password:
        description:
        - Administrator password
        required: true
        type: str
      username:
        description:
        - Administrator user name
        required: true
        type: str
      verify_ssl:
        default: true
        description:
        - Set to false to disable SSL verification
        type: bool
    type: dict

kernel_shm_max:
    default: 2048
    description: kernel_shm_max of the sysctl profile
    required: false
    type: int

net_ipv4_tcp_ecn:
    default: 2
    description: net_ipv4_tcp_ecn of sysctlprofilen
    required: false
    type: int

net_ipv4_tcp_fack:
    default: 1
    description: net_ipv4_tcp_fack of sysctlprofile
    required: false
    type: int

net_ipv4_tcp_sack:
    default: 1
    description: net_ipv4_tcp_sack of sysctlprofile
    required: false
    type: int

net_core_somaxconn:
    default: 1024
    description: net_core_somaxconn of sysctlprofile
    required: false
    type: int

net_ipv4_tcp_dsack:
    default: 1
    description: net_ipv4_tcp_dsack of sysctlprofile
    required: false
    type: int

net_core_optmem_max:
    default: 20480
    description: net_core_optmem_max of sysctlprofile
    required: false
    type: int

net_ipv4_tcp_rfc1337:
    default: 0
    description: net_ipv4_tcp_rfc1337 of sysctlprofile
    required: false
    type: int

net_core_rmem_default:
    default: 212992
    description: net_core_rmem_default of sysctlprofile
    required: false
    type: int

net_core_wmem_default:
    default: 212992
    description: net_core_wmem_default of sysctlprofile
    required: false
    type: int

net_ipv4_tcp_rmem_max:
    default: 6291456
    description: net_ipv4_tcp_rmem_max of sysctlprofile
    required: false
    type: int

net_ipv4_tcp_rmem_min:
    default: 4096
    description: net_ipv4_tcp_rmem_min of sysctlprofile
    required: false
    type: int

net_ipv4_tcp_tw_reuse:
    default: 0
    description: net_ipv4_tcp_tw_reuse of sysctlprofile
    required: false
    type: int

net_ipv4_tcp_wmem_max:
    default: 4194304
    description: net_ipv4_tcp_wmem_max of sysctlprofile
    required: false
    type: int

net_ipv4_tcp_wmem_min:
    default: 4096
    description: net_ipv4_tcp_wmem_min of sysctlprofile
    required: false
    type: int

net_ipv4_tcp_syncookies:
    default: 0
    description: net_ipv4_tcp_syncookies of sysctlprofile
    required: false
    type: int

net_ipv4_tcp_timestamps:
    default: 1
    description: net_ipv4_tcp_timestamps of sysctlprofile
    required: false
    type: int

net_ipv4_tcp_tw_recycle:
    default: 0
    description: net_ipv4_tcp_tw_recycle of sysctlprofile
    required: false
    type: int

net_ipv4_tcp_fin_timeout:
    default: 15
    description: net_ipv4_tcp_fin_timeout of sysctlprofile
    required: false
    type: int

net_ipv4_tcp_max_orphans:
    default: 131072
    description: net_ipv4_tcp_max_orphans of sysctlprofile
    required: false
    type: int

net_ipv4_tcp_syn_retries:
    default: 5
    description: net_ipv4_tcp_syn_retries of sysctlprofile
    required: false
    type: int

net_ipv4_tcp_rmem_default:
    default: 87380
    description: net_ipv4_tcp_rmem_default of sysctlprofile
    required: false
    type: int

net_ipv4_tcp_wmem_default:
    default: 16384
    description: net_ipv4_tcp_wmem_default of sysctlprofile
    required: false
    type: int

net_ipv4_tcp_adv_win_scale:
    default: 6
    description: net_ipv4_tcp_adv_win_scale of sysctlprofile
    required: false
    type: int

net_core_netdev_max_backlog:
    default: 2500
    description: net_core_netdev_max_backlog of sysctlprofile
    required: false
    type: int

net_ipv4_conf_all_rp_filter:
    default: 2
    description: If you need to set several IPs with the same network range on several
      interface
    required: false
    type: int

net_ipv4_tcp_keepalive_time:
    default: 1800
    description: net_ipv4_tcp_keepalive_time of sysctlprofile
    required: false
    type: int

net_ipv4_tcp_max_tw_buckets:
    default: 131072
    description: net_ipv4_tcp_max_tw_buckets of sysctlprofile
    required: false
    type: int

net_ipv4_tcp_keepalive_intvl:
    default: 75
    description: net_ipv4_tcp_keepalive_intvl of sysctlprofile
    required: false
    type: int

net_ipv4_tcp_max_syn_backlog:
    default: 8192
    description: net_ipv4_tcp_max_syn_backlog of sysctlprofile
    required: false
    type: int

net_ipv4_tcp_moderate_rcvbuf:
    default: 1
    description: net_ipv4_tcp_moderate_rcvbuf of sysctlprofile
    required: false
    type: int

net_ipv4_tcp_syn_ack_retries:
    default: 3
    description: net_ipv4_tcp_syn_ack_retries of sysctlprofile
    required: false
    type: int

net_ipv4_tcp_windows_scaling:
    default: 1
    description: net_ipv4_tcp_windows_scaling of sysctlprofile
    required: false
    type: int

net_ipv4_tcp_keepalive_probes:
    default: 9
    description: net_ipv4_tcp_keepalive_probes of sysctlprofile
    required: false
    type: int

net_ipv4_tcp_abort_on_overflow:
    default: 0
    description: net_ipv4_tcp_abort_on_overflow of sysctlprofile
    required: false
    type: int

net_ipv4_tcp_congestion_control:
    choices:
    - cubic
    - westwood
    default: cubic
    description: net_ipv4_tcp_congestion_control of sysctlprofile
    required: false
    type: str

net_ipv4_tcp_workaround_signed_windows:
    default: 0
    description: net_ipv4_tcp_workaround_signed_windows of sysctlprofile
    required: false
    type: int