This Role Has Been Deprecated: Please use the version in the oasis_roles.system Ansible Collection

firewalld

This role provides basic hole punching and local port forwarding for the firewalld service, to aid in the task of running application stacks deployed using the OASIS roles. It provides a simple interface to the Ansible firewalld module.

Requirements

Ansible 2.4 or higher

Red Hat Enterprise Linux 7 or equivalent

Valid Red Hat Subscriptions

Role Variables

Currently the following variables are supported:

General

firewalld_zone - firewall zone for all rules
firewalld_ports_open - permanently open ports (IPv4+IPv6) for given firewall zone
firewalld_services - a list of named services for firewalld to enable
firewalld_ports_forward - permanently forward local ports (IPv4+IPV6) for given firewall zone, e.g. TCP 80->8080 for webapps
firewalld_become - use Ansible "become" for proper authorization to manage the firewall

Dependencies

None

Example Playbook

- hosts: firewalld-servers
  roles:
    - role: firewalld
      firewalld_zone: public
      firewalld_ports_open:
        - proto: tcp
          port: 8080
        - proto: udp
          port: 9990-9999
      firewalld_services:
        - ssh
      firewalld_ports_forward:
        - proto: tcp
          port: 80
          to_port: 8080
      firewalld_become: true

License

GPLv3

Author Information

David Roble droble@redhat.com

oasis-roles/firewalld