shorewall:

create a macro for the bigcouch replication server stunnel to enable these
connections pulling bigcouch_replication_clients,
bigcouch_replication_server_port from hiera

create site_shorewall::couchdb::dnat and create_resources to properly setup DNAT
for bigcouch_replication_clients

1 files changed, 21 insertions, 0 deletions

diff --git a/puppet/modules/site_shorewall/manifests/couchdb/dnat.pp b/puppet/modules/site_shorewall/manifests/couchdb/dnat.pp
new file mode 100644
index 00000000..85cea9d5
--- /dev/null
+++ b/puppet/modules/site_shorewall/manifests/couchdb/dnat.pp
@@ -0,0 +1,21 @@
+define site_shorewall::couchdb::dnat (
+  $source,
+  $connect,
+  $connect_port,
+  $accept_port,
+  $proto,
+  $destinationport )
+{
+
+
+  shorewall::rule {
+    "dnat_${name}_${destinationport}":
+      source          => $source,
+      destination     => "\$FW:127.0.0.1:${accept_port}",
+      destinationport => $destinationport,
+      originaldest    => $connect,
+      proto           => $proto,
+      order           => 200,
+      action          => 'DNAT';
+  }
+}