Skip to main content

rWeb

Director pulls a large amount of routing and prefix configuration from rWeb in order to prevent duplication of effort, and to align detection and redirection with filtering policies that may already be in place in rWeb.

rWeb Configuration​

[rweb]
# URL to rWeb API
url = "https://rweb.local.riorey.com"

# Ignore SSL Certificate
# WARNING: Has security implications if enabled!
# Optional, Defaults to false
ignore-cert = true

# Credentials for rWeb API
# Must at least have Read-Only to all groups and zones
user = "admin"

# Must have exactly one of these two ways to enter a password
password-file = "/etc/director/rweb-password"
password = "a-password-goes-here"

# Configure how frequently rWeb should be polled for zone and subnet changes.
# Optional, defaults to 5 minutes.
poll-time = "5 minutes"

rWeb Configuration Keys​

The legal keys in this section are:

  • url: The URL to the rWeb API. In most cases you would point this at the primary DNS name you've set up for rWeb.
  • ignore-cert: An optional value, that if set to true, ignores the SSL Certificate presented by the server at the defined url. The default value of false means that Director will try to verify the certificate presented by the server.
  • user: The user that will be used for logging into the API. At a minimum, this user must have Read-Only access to all Groups and Zones (to ensure all relevant routing configuration can be queried).
  • password-file, password: Two mutually exclusive key-value pairs that provide the password for authenticating the user used for querying the API. password-file is the location on the Director file system for a file that should contain a single line with the user's password string. password is the direct value of the password, entered into the TOML itself.
  • poll-time: An optional Duration value, indicating how frequently Director should poll rWeb for Zone and subnet configuration changes. If omitted, defaults to 5 minutes.