mirrors/mdlayher-homelab
1
0
Fork 0
mirror of https://github.com/mdlayher/homelab.git synced 2024-12-14 11:47:32 +00:00
Code Activity

nixos/routnerr-3: metronet setup

Browse source
This commit is contained in:
Matt Layher 2023-08-04 21:28:03 -04:00
parent 033805cd8b
commit c37d017168
2 changed files with 66 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

72
nixos/routnerr-3/networking.nix
View file

@ -114,7 +114,7 @@ in {
}];
};
# Wired WAN.
# Wired WAN: Spectrum 1GbE.
links."10-wan0" = ethLink "wan0" "f4:90:ea:00:c7:8d";
networks."10-wan0" = {
matchConfig.Name = "wan0";
@ -126,6 +126,9 @@ in {
# Don't release IPv4 address on restart/reboots to avoid churn.
SendRelease = false;
# Deprioritize Spectrum IPv4.
RouteMetric = 200;
};
dhcpV6Config = {
# Spectrum gives a /56.
@ -139,6 +142,66 @@ in {
};
};
# Wired WAN: Metronet 10GbE.
# TODO(mdlayher): enable!
links."11-wan1" = ethLink "wan1" "f4:90:ea:00:c7:91";
networks."11-wan1" = {
enable = false;
matchConfig.Name = "wan1";
networkConfig.DHCP = "yes";
# Never accept ISP DNS or search domains for any DHCP/RA family.
dhcpV4Config = {
UseDNS = false;
UseDomains = false;
# Don't release IPv4 address on restart/reboots to avoid churn.
SendRelease = false;
# Prioritize Metronet IPv4.
RouteMetric = 100;
};
dhcpV6Config = {
# TODO: ???.
PrefixDelegationHint = "::/48";
UseDNS = false;
};
ipv6AcceptRAConfig = {
UseDNS = false;
UseDomains = false;
};
};
# Wired WAN: Metronet 1GbE.
# TODO(mdlayher): remove once wan1 is up.
links."11-wan2" = ethLink "wan2" "f4:90:ea:00:c7:8e";
networks."11-wan2" = {
matchConfig.Name = "wan2";
networkConfig.DHCP = "yes";
# Never accept ISP DNS or search domains for any DHCP/RA family.
dhcpV4Config = {
UseDNS = false;
UseDomains = false;
# Don't release IPv4 address on restart/reboots to avoid churn.
SendRelease = false;
# Prioritize Metronet IPv4.
RouteMetric = 100;
};
dhcpV6Config = {
# TODO: ???.
PrefixDelegationHint = "::/48";
UseDNS = false;
};
ipv6AcceptRAConfig = {
UseDNS = false;
UseDomains = false;
};
};
# Physical management LAN. For physical LANs, we have to make sure to match
# on both Type and MACAddress since VLANs would share the same MAC.
links."15-mgmt0" = ethLink "mgmt0" "f4:90:ea:00:c7:90";
@ -183,13 +246,6 @@ in {
});
};
# Unused physical management LANs.
links."11-wan1" = ethLink "mgmt1" "f4:90:ea:00:c7:91";
# Unused WANs.
links."12-eth1" = ethLink "eth1" "f4:90:ea:00:c7:8e";
links."13-eth2" = ethLink "eth2" "f4:90:ea:00:c7:8f";
# Home VLAN.
netdevs."20-lan0" = vlanNetdev "lan0" 10;
networks."20-lan0" = vlanNetwork "lan0" 10;

4
nixos/routnerr-3/nftables.nix
View file

@ -22,8 +22,8 @@ let
mkCSV = lib.concatMapStrings (ifi: "${ifi.name}, ");
# WAN interfaces.
unmetered_wans = with vars.interfaces; [ wan0 ];
all_wans = with vars.interfaces; [ wan0 ];
unmetered_wans = with vars.interfaces; [ wan0 wan1 wan2 ];
all_wans = with vars.interfaces; [ wan0 wan1 wan2 ];
# LAN interfaces, segmented into trusted, limited, and untrusted groups.
metered_lans = with vars.interfaces; [ mgmt0 lan0 ];