dev/nixfiles
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

nixos/estuary: Add BGP4 and export routes to kernel

Browse Source
This commit is contained in:
Jack O'Sullivan 2022-10-08 20:20:10 +01:00
parent 176e603f19
commit 401401f6bc
1 changed files with 65 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

80
nixos/boxes/colony/vms/estuary/bgp.nix
View File

@ -1,5 +1,6 @@
{ lib, pkgs, config, assignments, allAssignments, ... }: { lib, pkgs, config, assignments, allAssignments, ... }:
let let
securebitSpace = "2a0e:97c0:4d0::/44";
in in
{ {
config = { config = {
@ -9,10 +10,12 @@ in
# TODO: Clean up and modularise # TODO: Clean up and modularise
config = '' config = ''
define OWNAS = 211024; define OWNAS = 211024;
define OWNIP4 = ${assignments.internal.ipv4.address};
define OWNNETSET4 = [${assignments.internal.ipv4.address}/32];
define OWNIP6 = 2a0e:97c0:4df:0:3::1; define OWNIP6 = ${assignments.base.ipv6.address};
define OWNNET6 = 2a0e:97c0:4d0::/44; define OWNNET6 = ${securebitSpace};
define OWNNETSET6 = [2a0e:97c0:4d0::/44+]; define OWNNETSET6 = [${securebitSpace}+];
#define TRANSSET6 = [::1/128]; #define TRANSSET6 = [::1/128];
define INTNET6 = 2a0e:97c0:4df::/48; define INTNET6 = 2a0e:97c0:4df::/48;
@ -50,8 +53,17 @@ in
}; };
} }
protocol kernel { protocol kernel kernel4 {
#learn; ipv4 {
import none;
export filter {
if net ~ OWNNETSET4 then reject;
krt_prefsrc = OWNIP4;
accept;
};
};
}
protocol kernel kernel6 {
ipv6 { ipv6 {
#import filter bgp_export; #import filter bgp_export;
import none; import none;
@ -63,7 +75,27 @@ in
}; };
} }
template bgp base_bgp { template bgp base_bgp4 {
local as OWNAS;
direct;
ipv4 {
export none;
};
}
template bgp upstream_bgp4 from base_bgp4 {
ipv4 {
#import none;
import filter bgp_import;
};
}
template bgp peer_bgp4 from base_bgp4 {
ipv4 {
import filter bgp_import;
};
}
template bgp base_bgp6 {
local as OWNAS; local as OWNAS;
direct; direct;
ipv6 { ipv6 {
@ -71,25 +103,43 @@ in
}; };
} }
template bgp upstream_bgp from base_bgp { template bgp upstream_bgp6 from base_bgp6 {
ipv6 { ipv6 {
import none; #import none;
import filter bgp_import;
}; };
} }
template bgp peer_bgp from base_bgp { template bgp peer_bgp6 from base_bgp6 {
ipv6 { ipv6 {
import filter bgp_import; import filter bgp_import;
}; };
} }
protocol bgp coloclue from upstream_bgp { protocol bgp upstream4_coloclue_eun2 from upstream_bgp4 {
description "ColoClue"; description "ColoClue euNetworks 2 (IPv4)";
neighbor 2a02:898:0:20::1 as 8283; neighbor 94.142.240.253 as 8283;
}
protocol bgp upstream4_coloclue_eun3 from upstream_bgp4 {
description "ColoClue euNetworks 3 (IPv4)";
neighbor 94.142.240.252 as 8283;
} }
protocol bgp peer_luje from peer_bgp { protocol bgp upstream6_coloclue_eun2 from upstream_bgp6 {
description "LUJE.net"; description "ColoClue euNetworks 2 (IPv6)";
neighbor 2001:7f8:d9:5b::b93e:1 as 212855; neighbor 2a02:898:0:20::e2 as 8283;
}
protocol bgp upstream6_coloclue_eun3 from upstream_bgp6 {
description "ColoClue euNetworks 3 (IPv6)";
neighbor 2a02:898:0:20::e1 as 8283;
}
protocol bgp peer4_luje from peer_bgp4 {
description "LUJE.net (IPv4)";
neighbor 94.142.240.20 as 212855;
}
protocol bgp peer6_luje from peer_bgp6 {
description "LUJE.net (IPv6)";
neighbor 2a02:898:0:20::166:1 as 212855;
} }
''; '';
}; };