From c216adad03b74dbf954b0b2ed0c615a25f00e1ea Mon Sep 17 00:00:00 2001
From: Niklas Yann Wettengel <niyawe@niyawe.de>
Date: Wed, 14 Mar 2018 21:03:58 +0100
Subject: [PATCH] added iperf3

---
 .../configure_iptables/templates/ip6tables.rules |  2 ++
 .../configure_iptables/templates/iptables.rules  |  2 ++
 roles/install_iperf3/files/iperf3-tcp.service    |  9 +++++++++
 roles/install_iperf3/tasks/main.yml              | 16 ++++++++++++++++
 setup_fastd.yml                                  |  2 ++
 5 files changed, 31 insertions(+)
 create mode 100644 roles/install_iperf3/files/iperf3-tcp.service
 create mode 100644 roles/install_iperf3/tasks/main.yml

diff --git a/roles/configure_iptables/templates/ip6tables.rules b/roles/configure_iptables/templates/ip6tables.rules
index 5667a83..3b3bd03 100644
--- a/roles/configure_iptables/templates/ip6tables.rules
+++ b/roles/configure_iptables/templates/ip6tables.rules
@@ -35,6 +35,8 @@ COMMIT
 -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
 # munin
 -A INPUT -p tcp -m tcp --dport 4949 -j ACCEPT
+# iperf3
+-A INPUT -p tcp -m tcp -s 2a03:2260:1016::/48 --dport 5201 -j ACCEPT
 
 {% if 'fastd' in group_names %}
 # dns
diff --git a/roles/configure_iptables/templates/iptables.rules b/roles/configure_iptables/templates/iptables.rules
index c568e4e..5fbe272 100644
--- a/roles/configure_iptables/templates/iptables.rules
+++ b/roles/configure_iptables/templates/iptables.rules
@@ -33,6 +33,8 @@ COMMIT
 -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
 # nginx
 -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
+# iperf3
+-A INPUT -p tcp -m tcp -s 10.222.0.0/16 --dport 5201 -j ACCEPT
 
 {% if 'fastd' in group_names %}
 # dns
diff --git a/roles/install_iperf3/files/iperf3-tcp.service b/roles/install_iperf3/files/iperf3-tcp.service
new file mode 100644
index 0000000..b35a534
--- /dev/null
+++ b/roles/install_iperf3/files/iperf3-tcp.service
@@ -0,0 +1,9 @@
+[Unit]
+Description=Iperf3 TCP Server
+After=network.target
+
+[Service]
+ExecStart=/usr/bin/iperf3 -s -V
+
+[Install]
+WantedBy=multi-user.target
diff --git a/roles/install_iperf3/tasks/main.yml b/roles/install_iperf3/tasks/main.yml
new file mode 100644
index 0000000..a7e5df6
--- /dev/null
+++ b/roles/install_iperf3/tasks/main.yml
@@ -0,0 +1,16 @@
+---
+- name: install iperf3
+  pacman:
+      name: iperf3
+      state: present
+
+- name: copy iperf3 systemd-service
+  copy:
+      src: iperf3-tcp.service
+      dest: /etc/systemd/system/iperf3-tcp.service
+
+- name: start and enable iperf3 tcp
+  systemd:
+      name: iperf3-tcp.service
+      enabled: yes
+      state: started
diff --git a/setup_fastd.yml b/setup_fastd.yml
index a25689b..43f2a25 100644
--- a/setup_fastd.yml
+++ b/setup_fastd.yml
@@ -23,6 +23,7 @@
       - install_babeld
       - install_fastd
       - install_monitoring
+      - install_iperf3
       - update_ssh_keys
       - install_admin_packages
 - name: basic uplink config
@@ -42,6 +43,7 @@
       - install_wireguard_backbone
       - install_babeld
       - install_monitoring
+      - install_iperf3
       - update_ssh_keys
       - install_admin_packages
 - name: install openvpn uplink