aboutsummaryrefslogtreecommitdiffstats
path: root/kud/tests/cFW/docker-compose.yml
diff options
context:
space:
mode:
authorVictor Morales <v.morales@samsung.com>2020-06-16 18:00:04 -0700
committerVictor Morales <v.morales@samsung.com>2020-06-17 08:15:40 -0700
commitdd79554660e0f81cc8723243235e82e8769490f7 (patch)
tree3bf0c12317e8cbd59a2ad85cfbc3cfa2284b76b1 /kud/tests/cFW/docker-compose.yml
parent7b860ae60bf9686b449ab2fe3f18c33944bdd71c (diff)
Update cFW instruction set
The cFW example has been changed since 1.3.0 version. This commit reduces the steps to setup and provision this CNF. Its main goal is to simplify deployment process. Issue-ID: MULTICLOUD-301 Change-Id: Id96ea4b427aff4c42ecfd43b42fa5d6970c4a6df Signed-off-by: Victor Morales <v.morales@samsung.com>
Diffstat (limited to 'kud/tests/cFW/docker-compose.yml')
-rw-r--r--kud/tests/cFW/docker-compose.yml80
1 files changed, 56 insertions, 24 deletions
diff --git a/kud/tests/cFW/docker-compose.yml b/kud/tests/cFW/docker-compose.yml
index 6d883fbd..29db821c 100644
--- a/kud/tests/cFW/docker-compose.yml
+++ b/kud/tests/cFW/docker-compose.yml
@@ -1,38 +1,70 @@
+---
+# SPDX-license-identifier: Apache-2.0
+##############################################################################
+# Copyright (c) 2020
+# All rights reserved. This program and the accompanying materials
+# are made available under the terms of the Apache License, Version 2.0
+# which accompanies this distribution, and is available at
+# http://www.apache.org/licenses/LICENSE-2.0
+##############################################################################
+
version: '3'
services:
packetgen:
+ image: packetgen:1.6.0
privileged: true
- network_mode: "host"
- image: electrocucaracha/packetgen
+ environment:
+ - PROTECTED_NET_CIDR=192.168.20.0/24
+ - FW_IPADDR=192.168.10.100
+ - SINK_IPADDR=192.168.20.250
+ ports:
+ - 8083:8183
build:
context: ./packetgen
- args:
- HTTP_PROXY: $HTTP_PROXY
- HTTPS_PROXY: $HTTPS_PROXY
+ networks:
+ unprotected:
+ ipv4_address: 192.168.10.200
firewall:
+ image: firewall:1.6.0
privileged: true
- network_mode: "host"
- image: electrocucaracha/firewall
+ environment:
+ - DCAE_COLLECTOR_IP=""
+ - DCAE_COLLECTOR_PORT=""
+ ports:
+ - 8083
build:
context: ./firewall
- args:
- HTTP_PROXY: $HTTP_PROXY
- HTTPS_PROXY: $HTTPS_PROXY
+ networks:
+ unprotected:
+ ipv4_address: 192.168.10.100
+ protected:
+ ipv4_address: 192.168.20.100
sink:
- privileged: true
- network_mode: "host"
- image: electrocucaracha/sink
+ image: sink:1.6.0
+ cap_add:
+ - NET_ADMIN
+ environment:
+ - UNPROTECTED_NET=192.168.10.0/24
+ - PROTECTED_NET_GW=192.168.20.100
+ ports:
+ - 8080:667
build:
context: ./sink
- args:
- HTTP_PROXY: $HTTP_PROXY
- HTTPS_PROXY: $HTTPS_PROXY
- darkstat:
- network_mode: "host"
- image: electrocucaracha/darkstat
- build:
- context: ./darkstat
- args:
- HTTP_PROXY: $HTTP_PROXY
- HTTPS_PROXY: $HTTPS_PROXY
+ networks:
+ protected:
+ ipv4_address: 192.168.20.250
+
+networks:
+ unprotected:
+ driver: overlay
+ ipam:
+ driver: default
+ config:
+ - subnet: 192.168.10.0/24
+ protected:
+ driver: overlay
+ ipam:
+ driver: default
+ config:
+ - subnet: 192.168.20.0/24