ti-mo / ansible-lanparty Goto Github PK

The current script for building up the hfsc/fq_codel hierarchy in lp-gw is garbage. The excellent pyroute2 library can be used to give this a proper implementation, maybe even create a stand-alone tool out of it.

• Config file per interface w/ tc tree
• Preferably atomic operations (rollbacks are supported by pyroute2-IPDB)
• systemd unit file in lp-gw to treat it as a service
• Ensure feature parity with our use case in pyroute2 (fq_codel and hfsc support was missing)
• Port tc script to pure Python using pyroute2
• Write generic declarative routing toolkit and publish on PyPI
• Implement routing toolkit in ansible-lanparty

Hello..

I'm seeing new DNS entry for steam

valve1001.steampipe.steamcontent.com

Hi!
I have found a new blizzard DNS entry when downloading WOW: level3.blizzard.com
this redirects to CNAME: download.blizzard.com.c.footprint.net
I have configured the first one: level3.blizzard.com to the nGINx Server, it works but very slow and after some minutes it stops, also, blizzard tries to get the updates through:
blzddist1-a.akamaihd.net
blzddist2-a.akamaihd.net
but it is not working.

hope this can be solved, maybe blizzard began to use SSL (I don't know how to check that).

Hi Timo, since you added the "proxy_hide_header ETag" (in the blizzard depot configuration) I am testing the proxy again. The problem I have is not because this new configuration, I have tested with and without this line; I have four identical bandwidth ADSL connections (with load balancing configuration), when downloading without nginx there is no problem so the download is made trough all the connections, but when I use nginx only one connection is used at a time, its curious because the download is made through one connection for about 10-15 seconds and then it passes to other connection, the max speed reached is the speed of one connection. I haven't this issue before (last tested November 2016). Steam is performing better, it uses more than one connection at a time (but I thing this can perform better reaching the full capacity of the four connection, after many tests it reaches about 50% of the total connections capacity, but its 200% better that the blizzard updates).

Hope you have some ideas how to solve this. Thanks in advance !!!

I have a fresh Ubuntu18 system and try to run this on my laptop to test, i run this command:

ansible-playbook -i inventory.ini playbook.yml --ask-sudo-pass

playbook.yml:

---
- hosts: all
  roles:
    - lp-steam

inventory.ini:

[local]
127.0.0.1 ansible_connection=local

Error:

[DEPRECATION WARNING]: The sudo command line option has been deprecated in favor of the "become" command line arguments. This feature will be 
removed in version 2.9. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.
SUDO password: 

PLAY [all] ***************************************************************************************************************************************

TASK [Gathering Facts] ***************************************************************************************************************************
ok: [127.0.0.1]

TASK [lp-steam : Install | Add i386 Architecture] ************************************************************************************************
ok: [127.0.0.1]

TASK [lp-steam : Install | Update APT Cache for i386] ********************************************************************************************
skipping: [127.0.0.1]

TASK [lp-steam : Install | (lib32) Packages] *****************************************************************************************************
[DEPRECATION WARNING]: Invoking "apt" only once while using a loop via squash_actions is deprecated. Instead of using a loop to supply multiple 
items and specifying `name: "{{ item }}"`, please use `name: ['lib32gcc1', 'libcurl3:i386', 'libssl1.0.0:i386', 'libstdc++6:i386']` and remove 
the loop. This feature will be removed in version 2.11. Deprecation warnings can be disabled by setting deprecation_warnings=False in 
ansible.cfg.
failed: [127.0.0.1] (item=[u'lib32gcc1', u'libcurl3:i386', u'libssl1.0.0:i386', u'libstdc++6:i386']) => {"changed": false, "item": ["lib32gcc1", "libcurl3:i386", "libssl1.0.0:i386", "libstdc++6:i386"], "msg": "'/usr/bin/apt-mark manual lib32gcc1 libcurl3:i386 libssl1.0.0:i386 libstdc++6:i386' failed: E: Could not create temporary file for /var/lib/apt/extended_states - mkstemp (13: Permission denied)\nE: Failed to write temporary StateFile /var/lib/apt/extended_states\n", "rc": 100, "stderr": "E: Could not create temporary file for /var/lib/apt/extended_states - mkstemp (13: Permission denied)\nE: Failed to write temporary StateFile /var/lib/apt/extended_states\n", "stderr_lines": ["E: Could not create temporary file for /var/lib/apt/extended_states - mkstemp (13: Permission denied)", "E: Failed to write temporary StateFile /var/lib/apt/extended_states"], "stdout": "lib32gcc1 can not be marked as it is not installed.\nlibcurl3:i386 can not be marked as it is not installed.\nlibssl1.0.0:i386 can not be marked as it is not installed.\nlibstdc++6:i386 set to manually installed.\n", "stdout_lines": ["lib32gcc1 can not be marked as it is not installed.", "libcurl3:i386 can not be marked as it is not installed.", "libssl1.0.0:i386 can not be marked as it is not installed.", "libstdc++6:i386 set to manually installed."]}
	to retry, use: --limit @/home/alex1a/ProgrammingFiles/ansible-lanparty/playbook.retry

PLAY RECAP ***************************************************************************************************************************************
127.0.0.1                  : ok=2    changed=0    unreachable=0    failed=1 

https://github.com/ti-mo/ansible-lanparty/blob/master/lp-dhcpd/templates/dhcpd.j2#L33-L35

Might be related to Ansible 2.0, but this block seemed to cause me some issues during my latest deployment. Also, there were issues with RNDC communication between ns and dhcp on the same host, needs some further investigation.

Hi there,

Really interesting project! 😉

I just wanted to drop a line and mention the DebOps Project as it also provide a few roles which do similar things then yours. Check: https://debops.org/status.html

Just in case you need more for your setup.

As reported by @fsalazar1977, Riot is now serving its content over SSL. (at least the client requests https:// resources) This cripples our ability to cache game content and breaks the client's update mechanism until fixed.

Looking for possible downgrade mechanisms to HTTP. Since Akamai's certs are used for l3cdn.riotgames.com, I assume cert validation is disabled, issuing self-signed to the client is rumored to work. (to be confirmed)

@RiotGames, please don't do this, run artifact integrity checks on the client. :)

Our custom in-game admin menu for SourceMod lacks some features Feedback received from users, but haven't been able to verify by myself:

• SourceMod sm_pause does not appear to be working as intended.
• No in-game map selection menu
• cache, mirage, overpass, and cbble missing from map rotation

The default apt sources configuration in lp-base can be greatly improved (using Debian's httpredir). Backports should be included and no region-local package site should be used.

Dear Timo,

I was looking at your work, and it seems very interesting.

I was wondering if i could use some of it to create a cache server for steam, blizzard, etc...

Anything that could help me achieve what i want is highly appreciated,

Thanks in advance,

Elie

Just a FYI - Twitch caching no longer works due to HTTPS being used.

Same story as #8, Twitch HLS is now served over HTTPS.

Trying to contact Twitch on this matter.

Hi Temo, I have been testing steam (dota2); all traffic is passing through nGinx but not all is being cached, it seems that some parts are ignored. After downloading the complete game, the size of the Steam depot file is (approximately) the half size of the game, checked all the client traffic and it passes over nGinx, some idea whats is happening?