clerie/nixfiles
1
0
Fork 0
Code

hosts/dn42-ildix-service: prepare BGP setup

Browse Source
This commit is contained in:
clerie 2023-02-28 20:50:26 +01:00
parent 66baa8969f
commit dbc008769e
2 changed files with 64 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

62
hosts/dn42-ildix-service/bird.nix Normal file
View File

@ -0,0 +1,62 @@
{ config, lib, ... }:
{
networking.firewall.allowedTCPPorts = [ 179 ];
# something doesn't work right
services.bird2.enable = false;
services.bird2.config = ''
router id ${(lib.head config.networking.interfaces.ens18.ipv4.addresses).address};
ipv6 table bgp6;
protocol static {
ipv6 {
table bgp6;
};
route fd81:edb3:71d8::/48 via "lo";
}
protocol kernel {
ipv6 {
table bgp6;
export filter {
krt_prefsrc=${(lib.head config.networking.interfaces.lo.ipv6.addresses).address};
accept;
};
import none;
};
}
template bgp ildix {
local as 4242422953;
graceful restart on;
source address fd81:edb3:71d8:ffff:2953::1;
ipv6 {
table bgp6;
next hop self;
import keep filtered;
import filter {
if net ~ [fd00::/8{8,64}] then accept;
reject;
};
export filter {
if net ~ [fd81:edb3:71d8::/48{48,64}] then accept;
reject;
};
};
}
protocol bgp peer_ildix_clerie from ildix {
neighbor fd81:edb3:71d8:ffff::13 as 4242422953;
}
protocol bgp peer_ildix_nex from ildix {
neighbor fd81:edb3:71d8:ffff::14 as 4242422953;
}
protocol device {
scan time 10;
}
'';
}

4
hosts/dn42-ildix-service/configuration.nix
View File

@ -5,6 +5,7 @@
[
./hardware-configuration.nix
../../configuration/proxmox-vm
./bird.nix
];
# Use the GRUB 2 boot loader.
@ -27,7 +28,7 @@
# VM Nat Netz mercury
networking.interfaces.ens18.ipv4.addresses = [ { address = "192.168.10.28"; prefixLength = 24; } ];
# ildix peering lan
networking.interfaces.ens19.ipv6.addresses = [ { address = "fd81:ed3:71d8:ffff:2953::1"; prefixLength = 64; } ];
networking.interfaces.ens19.ipv6.addresses = [ { address = "fd81:edb3:71d8:ffff:2953::1"; prefixLength = 64; } ];
# IPv6 Uplink
networking.interfaces.ens20.ipv6.addresses = [ { address = "2001:638:904:ffc9::c"; prefixLength = 64; } ];
@ -35,7 +36,6 @@
networking.defaultGateway = { address = "192.168.10.1"; interface = "ens18"; };
networking.nameservers = [ "2001:638:904:ffcc::3" "2001:638:904:ffcc::4" "141.24.40.3" "141.24.40.4" ];
system.stateVersion = "23.05";
}