Pilot
Simple web-based SDN controller for family and friends.
Introduction
Pilot is the SDN controller for your home. Once Pilot is set up, any device in your LAN can visit Pilot's web interface to easily select their own VRF.
Requirements
Server running Pilot:
- Python 3.7 or later (if you don't use the Docker image)
- GoBGP with gRPC enabled (if you don't use the Docker image)
- LAN devices should not go through SNAT/masquerade to access the server (for proper IP address detection)
Gateway router:
- Has VRF-Lite capability
- Can act as a BGP Flow Specification client
Usage
Router Setup
- Put different network profiles in different VRFs
- Add BGP session with your GoBGP instance and enable
ipv4 flowspecandipv6 flowspecaddress families - Allow flowspec rule installation on the interfaces to LAN clients
Example configuration for Cisco IOS XE 16.x:
! Enable flowspec rule installation
flowspec
local-install interface-all
! VRF definition
ip vrf UPLINK1
rd 100:100
route-target both 100:100
ip vrf UPLINK2
rd 200:200
route-target both 200:200
! Uplink interfaces
interface GigabitEthernet0/0/0
description uplink-1
ip vrf select source
ip vrf receive UPLINK1
ip flowspec disable
ipv6 flowspec disable
interface GigabitEthernet0/0/1
description uplink-2
ip vrf select source
ip vrf receive UPLINK2
ip flowspec disable
ipv6 flowspec disable
! LAN interfaces
interface GigabitEthernet0/0/2
description LAN
ip address 192.168.1.1 255.255.255.0
ip vrf select source
ip vrf receive UPLINK1
ip vrf receive UPLINK2
! BGP peer setup
router bgp 65540
bgp router-id 169.254.1.2
neighbor 169.254.1.1 remote-as 65540
address-family ipv4 flowspec
neighbor 169.254.1.1 activate
address-family ipv6 flowspec
neighbor 169.254.1.1 activate
! Routes for global and VRFs
ip route 0.0.0.0 0.0.0.0 x.x.x.x 10
ip route 0.0.0.0 0.0.0.0 y.y.y.y 20
ip route vrf UPLINK1 0.0.0.0 0.0.0.0 x.x.x.x
ip route vrf UPLINK2 0.0.0.0 0.0.0.0 y.y.y.y
Example configuration for Juniper Junos OS (interface configuration left out):
set policy-options policy-statement accept-all term 1 then accept
set protocols bgp local-as 65540
set protocols bgp group flowspec family inet flow no-validate accept-all
set protocols bgp group flowspec family inet6 flow no-validate accept-all
set protocols bgp group flowspec neighbor 169.254.1.1 peer-as 65540
set routing-options flow term-order standard
# exclude your upstream interfaces:
# set routing-options flow interface-group [<group-id>] [exclude <group-id>]
Pilot Setup
The easiest way to run Pilot is using the Docker image. Download all the files in config and put them in a directory.
In gobgpd.toml:
- Change
global.config.asandglobal.config.router-id - Change
neighbors[].config.neighbor-addressandneighbors[].config.peer-as
In pilot.toml:
- Add or change
rule
Then spin up our Docker container:
docker run --restart=always --name=pilot --network=host -v path/to/your/config/directory:/etc/pilot:ro jamesits/pilot:latestThe web UI will be on port 80.
Thanks
This project is inspired by xtomcom/NetworkSwitch.