Add host dn42-il-gw6

hosts/dn42-il-gw6/configuration.nix

@@ -0,0 +1,160 @@
+{ config, pkgs, lib, ... }:
+
+{
+  imports =
+    [
+      ./hardware-configuration.nix
+      ../../configuration/common
+      ../../configuration/proxmox-vm
+      ../../configuration/dn42
+      ../../modules/policyrouting
+    ];
+
+  boot.loader.grub.enable = true;
+  boot.loader.grub.version = 2;
+  boot.loader.grub.device = "/dev/vda";
+
+  networking.hostName = "dn42-il-gw6";
+
+  networking.useDHCP = false;
+  # IPv6 Uplink
+  networking.interfaces.ens21.ipv6.addresses = [ { address = "2001:638:904:ffc9::9"; prefixLength = 64; } ];
+  # Ildix
+  networking.interfaces.ens22.ipv6.addresses = [ { address = "fd81:edb3:71d8:ffff:2574::6"; prefixLength = 64; } ];
+  # VM Nat Netz mercury
+  networking.interfaces.ens18.ipv4.addresses = [ { address = "192.168.10.26"; prefixLength = 24; } ];
+  # OSPF Netz
+  networking.interfaces.ens19 = {};
+
+
+  networking.defaultGateway = { address = "192.168.10.1"; interface = "ens18"; };
+  networking.defaultGateway6 = { address = "2001:638:904:ffc9::1"; interface = "ens21"; };
+  networking.nameservers = [ "2001:638:904:ffcc::3" "2001:638:904:ffcc::4" "141.24.40.3" "141.24.40.4" ];
+
+  petabyte.policyrouting = {
+    enable = true;
+    rules6 = [
+      { rule = "from all to fd56:4902:eca0::/48 lookup 1337"; prio = 10000; }
+      { rule = "from all to all lookup 2342"; prio = 10000; }
+      { rule = "from all to fd56:4902:eca0::/48 unreachable"; prio = 20000; }
+      { rule = "from fd56:4902:eca0::/48 to all unreachable"; prio = 20000; }
+    ];
+  };
+
+  services.bird2.enable = true;
+  services.bird2.config = ''
+  router id ${ (lib.head config.networking.interfaces.ens18.ipv4.addresses).address };
+
+  ipv6 table ospf6;
+  ipv6 table bgp6;
+
+  protocol direct {
+          interface "ens20";
+          ipv6 {
+  		table ospf6;
+  	};
+  }
+
+  protocol static {
+          ipv6 {
+                  table bgp6;
+          };
+          route fd56:4902:eca0::/48 via "lo";
+          route fd56:4902:eca0::/52 via "lo";
+  }
+
+  protocol kernel {
+          ipv6 {
+                  table ospf6;
+                  export filter {
+                          krt_prefsrc=fd56:4902:eca0:6::1;
+  			accept;
+                  };
+                  import none;
+          };
+  	kernel table 1337;
+  }
+
+  protocol kernel {
+          ipv6 {
+                  table bgp6;
+                  export filter {
+                          krt_prefsrc=fd56:4902:eca0:6::1;
+  			accept;
+                  };
+                  import none;
+          };
+          kernel table 2342;
+  }
+
+  protocol ospf v3 {
+          ipv6 {
+                  table ospf6;
+                  import all;
+                  export all;
+          };
+          area 0 {
+                  interface "ens19" {
+                          cost 80;
+                  };
+          };
+  }
+
+  protocol bgp gw1 {
+          local as 4242422574;
+          graceful restart on;
+          neighbor fd56:4902:eca0:1::1 as 4242422574;
+          source address fd56:4902:eca0:6::1;
+          ipv6 {
+                  table bgp6;
+                  igp table ospf6;
+                  next hop self;
+                  import keep filtered;
+                  import all;
+                  export all;
+          };
+  }
+
+  protocol bgp gw5 {
+          local as 4242422574;
+          graceful restart on;
+          neighbor fd56:4902:eca0:5::1 as 4242422574;
+          source address fd56:4902:eca0:6::1;
+          ipv6 {
+                  table bgp6;
+  		igp table ospf6;
+  		next hop self;
+                  import keep filtered;
+                  import all;
+                  export all;
+          };
+  }
+
+  protocol bgp peer_ildix {
+          local as 4242422574;
+          graceful restart on;
+          neighbor fd81:edb3:71d8:ffff::13 as 4242422953;
+          source address fd81:edb3:71d8:ffff:2574::6;
+          ipv6 {
+                  table bgp6;
+                  igp table ospf6;
+                  next hop self;
+                  import keep filtered;
+                  import filter {
+                          if net ~ [fd00::/8{8,64}] then accept;
+                          reject;
+                  };
+                  export filter {
+                          if net ~ [fd00::/8{8,64}] then accept;
+                          reject;
+                  };
+          };
+  }
+
+  protocol device {
+          scan time 10;
+  }
+  '';
+
+  system.stateVersion = "21.03";
+}

hosts/dn42-il-gw6/hardware-configuration.nix

@@ -0,0 +1,23 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports =
+    [ (modulesPath + "/profiles/qemu-guest.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "virtio_pci" "sr_mod" "virtio_blk" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    { device = "/dev/disk/by-uuid/5ee49a83-b89f-40fd-858c-93addb27931c";
+      fsType = "ext4";
+    };
+
+  swapDevices = [ ];
+
+}