clerie/nixfiles
1
0
Fork 0
Code

hosts/carbon: Do not fall back IPv6 traffic via VPN, if no native IPv6 is available

Browse Source
This commit is contained in:
clerie 2024-10-20 17:06:36 +02:00
parent 24472aec49
commit 09f54a05ee
Signed by: clerie
GPG Key ID: BD9F56480870BAD2
2 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
hosts/carbon/wg-clerie.nix
View File

@ -5,5 +5,6 @@
enable = true; enable = true;
ipv6s = [ "2a01:4f8:c0c:15f1::8111/128" ]; ipv6s = [ "2a01:4f8:c0c:15f1::8111/128" ];
ipv4s = [ "10.20.30.111/32" ]; ipv4s = [ "10.20.30.111/32" ];
defaultViaVPN = false;
}; };
} }

9
modules/wg-clerie/default.nix
View File

@ -25,6 +25,11 @@ in
default = []; default = [];
description = "IPv4 interface addresses"; description = "IPv4 interface addresses";
}; };
defaultViaVPN = mkOption {
type = types.bool;
default = true;
description = "Use VPN default route for a protocol, if that protocol is unavailable in the underlay";
};
}; };
}; };
@ -45,7 +50,9 @@ in
{ rule = "to 2a01:4f8:c0c:15f1::1/128 ipproto udp dport 51820 unreachable"; prio = 20001; } { rule = "to 2a01:4f8:c0c:15f1::1/128 ipproto udp dport 51820 unreachable"; prio = 20001; }
# Try direct routing first, fallback to VPN # Try direct routing first, fallback to VPN
{ rule = "lookup main"; prio = 21000; } { rule = "lookup main"; prio = 21000; }
] ++ (if cfg.defaultViaVPN then [
{ rule = "lookup wg-clerie"; prio = 21001; } { rule = "lookup wg-clerie"; prio = 21001; }
] else []) ++ [
{ rule = "unreachable"; prio = 22000; } { rule = "unreachable"; prio = 22000; }
]; ];
rules4 = (concatMap (ip: [ rules4 = (concatMap (ip: [
@ -57,7 +64,9 @@ in
{ rule = "to 78.47.183.82/32 ipproto udp dport 51820 unreachable"; prio = 20001; } { rule = "to 78.47.183.82/32 ipproto udp dport 51820 unreachable"; prio = 20001; }
# Try direct routing first, fallback to VPN # Try direct routing first, fallback to VPN
{ rule = "lookup main"; prio = 21000; } { rule = "lookup main"; prio = 21000; }
] ++ (if cfg.defaultViaVPN then [
{ rule = "lookup wg-clerie"; prio = 21001; } { rule = "lookup wg-clerie"; prio = 21001; }
] else []) ++ [
{ rule = "unreachable"; prio = 22000; } { rule = "unreachable"; prio = 22000; }
]; ];
}; };