feat(ana-ml2): persist mesh return routes via ana-scale as an ifupdown if-up.d hook (playbooks/ana-ml2-mesh-routes.yaml, elway-applied, verified)

2026-09-08 23:49:38 -07:00
parent d8f625e1f2
commit f923d6a96e
3 changed files with 41 additions and 1 deletions
@@ -0,0 +1,11 @@
+#!/bin/sh
+# ifupdown hook: ana-ml2 mesh RETURN routes via ana-scale (10.250.50.45), on the VLAN-50 NIC.
+# Why: ana-ml2 has two DHCP defaults on two NICs; mesh traffic arrives on enp97s0f0np0.50 from
+# ana-scale and the reply would otherwise leave via the other NIC's default -> dropped at the
+# edge (off-site ssh to ana-ml2 timed out until 2026-09-08). Same-L2 next hop keeps both
+# directions on the VLAN-50 NIC. Managed from eshpfi-management playbooks/ana-ml2-mesh-routes.yaml.
+[ "$IFACE" = "enp97s0f0np0.50" ] || exit 0
+for n in 10.100.0.0/16 10.0.0.0/16 10.6.110.0/24 100.64.0.0/10; do
+    ip route replace "$n" via 10.250.50.45 dev enp97s0f0np0.50
+done
+exit 0