Managing a growing fmeet of WiFi routers combining OpenWRT, - - PowerPoint PPT Presentation

▶
managing a growing fmeet of wifi routers combining
SMART_READER_LITE
LIVE PREVIEW

Managing a growing fmeet of WiFi routers combining OpenWRT, - - PowerPoint PPT Presentation

Nov 05, 2023 162 likes •413 views

Managing a growing fmeet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix Kenan Ibrovi 03/07/19 Presentation 1 Managing a growing fmeet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix Problems

slide-1
SLIDE 1

03/07/19 Presentation 1

Managing a growing fmeet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix

Kenan Ibrović

slide-2
SLIDE 2

Presentation 2 03/07/19

Managing a growing fmeet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix

  • Problems
  • Requirements
  • T
  • olset
  • Issues and diffjculties (+solutions)
  • Future plans
slide-3
SLIDE 3

Presentation 3 03/07/19

Managing a growing fmeet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix

What do you do when you have 20 routers in a difgerent country with no techie there and ISP you don’t trust?

slide-4
SLIDE 4

Presentation 4 03/07/19

Managing a growing fmeet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix

  • Requirements:
  • Secure communication
  • Easy deployment
  • Easy management
  • Robustness
slide-5
SLIDE 5

Presentation 5 03/07/19

Managing a growing fmeet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix

TOOLS

slide-6
SLIDE 6

Presentation 6 03/07/19

Managing a growing fmeet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix

  • OpenWRT
  • 3000+ packages available
  • Regular updates
  • Open Source
slide-7
SLIDE 7

Presentation 7 03/07/19

Managing a growing fmeet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix

  • WireGuard
  • Remote access
  • Encrypted connection
  • Easy to use
slide-8
SLIDE 8

Presentation 8 03/07/19

Managing a growing fmeet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix

  • SaltStack
  • Execute commands across all managed

systems

  • Scalable
  • Secure
  • Standardize
slide-9
SLIDE 9

Presentation 9 03/07/19

Managing a growing fmeet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix

  • States
  • Design system confjgurations
  • One state for all devices
  • wifj.sls

salt-ssh ‘*’ state.apply wifj

slide-10
SLIDE 10

Presentation 10 03/07/19

Managing a growing fmeet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix nodegroup: pass-the-salt:

  • router-1
  • router-2
  • router-n

salt-ssh -N pass-the-salt state.apply wifj

slide-11
SLIDE 11

Presentation 11 03/07/19

Managing a growing fmeet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix

  • Pillars
  • Makes states reusable
  • Store credentials, variables...

non-fjltered.sls wifj_ssid: Pass The Salt wifj_pass: newsecretpass fjltered.sls wifj_ssid: Pass The Salt Filtered wifj_pass: secretpass

slide-12
SLIDE 12

Presentation 12 03/07/19

Managing a growing fmeet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix

  • Zabbix
slide-13
SLIDE 13

Presentation 13 03/07/19

Managing a growing fmeet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix

  • OpenVPN
  • All connected devices on VPN
  • One account
slide-14
SLIDE 14

Presentation 14 03/07/19

Managing a growing fmeet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix

Issues and diffjculties (+solutions)

slide-15
SLIDE 15

Presentation 15 03/07/19

Managing a growing fmeet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix

  • Salt client (minion) on OpenWRT?
  • None
  • Salt-ssh
slide-16
SLIDE 16

Presentation 16 03/07/19

Managing a growing fmeet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix

  • Limited space on the fmash memory?
  • USB fmash drive
  • Exroot confjguration
  • Automated (install_requirements.sh)
slide-17
SLIDE 17

Presentation 17 03/07/19

Managing a growing fmeet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix

  • OSError: Cannot locate OpenSSL libcrypto
  • Python can’t fjnd it
  • fjx_oserror.sh
slide-18
SLIDE 18

Presentation 18 03/07/19

Managing a growing fmeet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix

  • Firmware upgrade
  • Removes ALL user installed packages (no

WireGuard)

  • Keeps confjguration (there is hope)
  • upgrade.sls
slide-19
SLIDE 19

Presentation 19 03/07/19

Managing a growing fmeet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix

  • Confjguration messed up!!!
  • Remove USB fmash drive
  • Reboot
  • Plug it back in
  • Run install_requirements.sh
slide-20
SLIDE 20

Presentation 20 03/07/19

Managing a growing fmeet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix

  • setup.sh
  • wireguard-confjg.conf
  • router_confjg.sh

– Change password – Install and confjgure WireGuard

  • install_requirements.sh

– Exroot confjguration – fjx_oserror.sh – salt-ssh $SALT_NAME state.apply

slide-21
SLIDE 21

Presentation 21 03/07/19

Managing a growing fmeet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix

  • Future plans:
  • QoS
  • Outline VPN
slide-22
SLIDE 22

Presentation 22 03/07/19

Managing a growing fmeet of WiFi routers combining OpenWRT, WireGuard, Salt and Zabbix

  • kenan@occrp.org
  • tech@occrp.org
  • https://tech.occrp.org
  • Git: https://git.occrp.org/libre/salt-routers

img sources:

  • Router icons: https://fjndicons.com/fjles/icons/2652/gentleface/48/wifj_router_icon.png
  • Server icon: https://fjndicons.com/fjles/icons/2652/gentleface/48/wifj_router_icon.png
  • Salt master-minion icon:

https://docs.saltstack.com/en/getstarted/images/basic-comm.png

slide-23
SLIDE 23

03/07/19 Presentation 23

Thank You!