added iperf3

roles/configure_iptables/templates/ip6tables.rules

@@ -35,6 +35,8 @@ COMMIT
 -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
 # munin
 -A INPUT -p tcp -m tcp --dport 4949 -j ACCEPT
+# iperf3
+-A INPUT -p tcp -m tcp -s 2a03:2260:1016::/48 --dport 5201 -j ACCEPT
 
 {% if 'fastd' in group_names %}
 # dns

roles/configure_iptables/templates/iptables.rules

@@ -33,6 +33,8 @@ COMMIT
 -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
 # nginx
 -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
+# iperf3
+-A INPUT -p tcp -m tcp -s 10.222.0.0/16 --dport 5201 -j ACCEPT
 
 {% if 'fastd' in group_names %}
 # dns

roles/install_iperf3/files/iperf3-tcp.service

@@ -0,0 +1,9 @@
+[Unit]
+Description=Iperf3 TCP Server
+After=network.target
+
+[Service]
+ExecStart=/usr/bin/iperf3 -s -V
+
+[Install]
+WantedBy=multi-user.target

roles/install_iperf3/tasks/main.yml

@@ -0,0 +1,16 @@
+---
+- name: install iperf3
+  pacman:
+      name: iperf3
+      state: present
+
+- name: copy iperf3 systemd-service
+  copy:
+      src: iperf3-tcp.service
+      dest: /etc/systemd/system/iperf3-tcp.service
+
+- name: start and enable iperf3 tcp
+  systemd:
+      name: iperf3-tcp.service
+      enabled: yes
+      state: started

setup_fastd.yml

@@ -23,6 +23,7 @@
       - install_babeld
       - install_fastd
       - install_monitoring
+      - install_iperf3
       - update_ssh_keys
       - install_admin_packages
 - name: basic uplink config
@@ -42,6 +43,7 @@
       - install_wireguard_backbone
       - install_babeld
       - install_monitoring
+      - install_iperf3
       - update_ssh_keys
       - install_admin_packages
 - name: install openvpn uplink