anysec-macsec.clab.yml

name: anysec-macsec
prefix: ""

mgmt:
  network: anysec
  ipv4-subnet: 172.50.50.0/24

topology:
  kinds:
    nokia_sros:
      type: sr-1x-48d
      image: registry.srlinux.dev/pub/vr-sros:23.10.R1
      license: /opt/nokia/sros/r23_license.key
    linux:
      image: ghcr.io/hellt/network-multitool

  nodes:
    ### CORE FP5 and FP4###
    # FP5
    pe1:
      kind: nokia_sros
      mgmt-ipv4: 172.50.50.11
      startup-config: configs/core/pe1.partial.cfg

    # FP5
    pe2:
      kind: nokia_sros
      mgmt-ipv4: 172.50.50.12
      startup-config: configs/core/pe2.partial.cfg

    # FP4
    p3:
      kind: nokia_sros
      mgmt-ipv4: 172.50.50.13
      type: SR-1
      startup-config: configs/core/p3.partial.cfg

    # FP4
    p4:
      kind: nokia_sros
      mgmt-ipv4: 172.50.50.14
      type: SR-1
      startup-config: configs/core/p4.partial.cfg

    ### CEs ###
    # FP5
    ce5:
      kind: nokia_sros
      mgmt-ipv4: 172.50.50.51
      startup-config: configs/core/ce5.partial.cfg

    # FP5
    ce6:
      kind: nokia_sros
      mgmt-ipv4: 172.50.50.52
      startup-config: configs/core/ce6.partial.cfg

    ### CLIENTS & Automation Stack###
    ### Automation STACK / Flask - Hosted at Client7 ###
    client7:
      kind: linux
      mgmt-ipv4: 172.50.50.31
      binds:
        - configs/clients/client7/setup-client7.sh:/config/setup-client7.sh
        - scripts/requirements.txt:/config/requirements.txt
        - scripts/install_gnmic.sh:/config/install_gnmic.sh:rw
        - configs/webserver/:/flask_app/
      exec:
        - bash /config/setup-client7.sh
      group: server
      ports:
        - 9080:80
        - 35000:5000

    client8:
      kind: linux
      mgmt-ipv4: 172.50.50.32
      binds:
        - configs/clients/client8/setup-client8.sh:/config/setup-client8.sh
      exec:
        - bash /config/setup-client8.sh
      group: server

    ### TELEMETRY STACK ###
    gnmic:
      kind: linux
      mgmt-ipv4: 172.50.50.21
      image: ghcr.io/openconfig/gnmic:0.29.0
      binds:
        - configs/gnmic/gnmic-config.yml:/gnmic-config.yml:ro
      cmd: --config /gnmic-config.yml --log subscribe
      group: "10" # group 10 is assigned to the nodes of a telemetry stack

    prometheus:
      kind: linux
      mgmt-ipv4: 172.50.50.22
      image: prom/prometheus:v2.35.0
      binds:
        - configs/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml:ro
      cmd: --config.file=/etc/prometheus/prometheus.yml
      ports:
        - 9090:9090
      group: "10"

    grafana:
      kind: linux
      mgmt-ipv4: 172.50.50.23
      image: grafana/grafana:9.5.2
      binds:
        - configs/grafana/datasource.yml:/etc/grafana/provisioning/datasources/datasource.yaml:ro
        - configs/grafana/dashboards.yml:/etc/grafana/provisioning/dashboards/dashboards.yaml:ro
        - configs/grafana/dashboards:/var/lib/grafana/dashboards
      ports:
        - 3000:3000
      env:
        GF_INSTALL_PLUGINS: https://algenty.github.io/flowcharting-repository/archives/agenty-flowcharting-panel-1.0.0d.220606199-SNAPSHOT.zip;agenty-flowcharting-panel,https://github.com/cloudspout/cloudspout-button-panel/releases/download/7.0.23/cloudspout-button-panel.zip;cloudspout-button-panel
        GF_ORG_ROLE: "Editor"
        GF_ORG_NAME: "Main Org."
        GF_AUTH_ANONYMOUS_ENABLED: "true"
        GF_AUTH_ANONYMOUS: "true"
        GF_SECURITY_ALLOW_EMBEDDING: "true"
        GF_DASHBOARDS_MIN_REFRESH_INTERVAL: 2s
      group: "10"

  links:
    - endpoints: ["ce5:eth7", "pe1:eth3"]
    - endpoints: ["ce6:eth7", "pe2:eth3"]
    - endpoints: ["pe1:eth1", "p3:eth2"]
    - endpoints: ["pe1:eth2", "p4:eth2"]
    - endpoints: ["pe2:eth1", "p3:eth3"]
    - endpoints: ["pe2:eth2", "p4:eth3"]
    - endpoints: ["p3:eth1", "p4:eth1"]
    # Client7
    - endpoints: ["client7:eth1", "ce5:eth1"]
    - endpoints: ["client7:eth2", "ce5:eth2"]
    - endpoints: ["client7:eth3", "ce5:eth3"]
    # Client8
    - endpoints: ["client8:eth1", "ce6:eth1"]
    - endpoints: ["client8:eth2", "ce6:eth2"]
    - endpoints: ["client8:eth3", "ce6:eth3"]
    # Mirror - For Advanced TShoot, disabled by default
    - endpoints: ["pe1:eth6", "ce6:eth6"]
    - endpoints: ["pe2:eth5", "ce6:eth5"]
    - endpoints: ["ce6:eth10", "ce6:eth11"] ### mirror dest is eth10 to allow single point of capture