DGNum/infrastructure
9
6
Fork 1
Code Issues 13 Pull requests 4 Actions Packages Projects 1 Releases Wiki Activity

fix(routing): clean icmp storm
Some checks failed
Check meta / check_meta (pull_request) Successful in 26s
Details
Check meta / check_dns (pull_request) Successful in 48s
Details
build configuration / build_storage01 (pull_request) Successful in 1m30s
Details
build configuration / build_compute01 (pull_request) Successful in 1m37s
Details
build configuration / build_web02 (pull_request) Successful in 1m12s
Details
build configuration / build_rescue01 (pull_request) Successful in 1m8s
Details
build configuration / build_vault01 (pull_request) Successful in 2m3s
Details
build configuration / build_web01 (pull_request) Successful in 2m3s
Details
build configuration / push_to_cache (pull_request) Failing after 3m7s
Details
Check meta / check_meta (push) Successful in 23s
Details
Check meta / check_dns (push) Successful in 42s
Details
build configuration / build_compute01 (push) Successful in 1m23s
Details
build configuration / build_storage01 (push) Successful in 1m23s
Details
build configuration / build_vault01 (push) Successful in 1m11s
Details
build configuration / build_web01 (push) Successful in 1m34s
Details
build configuration / build_web02 (push) Successful in 1m12s
Details
lint / check (push) Successful in 23s
Details
build configuration / build_rescue01 (push) Successful in 1m21s
Details
build configuration / push_to_cache (push) Successful in 3m9s
Details

Browse source
This commit is contained in:
katvayor 2024-05-31 20:29:53 +02:00
parent dce439fcca
commit 411795c664
Signed by: lbailly
GPG key ID: CE3E645251AC63F3
2 changed files with 16 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
machines/vault01/networking.nix
View file

@ -116,7 +116,16 @@ let
vlan-admin-ap = {
Id = 3001;
address = [ "fd26:baf9:d250:8010::1/60" ];
address = [ "fd26:baf9:d250:8001::1/64" ];
extraNetwork.ipv6Prefixes = [
{
ipv6PrefixConfig = {
AddressAutoconfiguration = false;
OnLink = false;
Prefix = "fd26:baf9:d250:8001::/64";
};
}
];
};
vlan-apro = {
@ -229,12 +238,15 @@ in
content = ''
chain postrouting {
type nat hook postrouting priority 100;
snat ip to 129.199.195.130-129.199.195.158
ip saddr 10.0.0.0/16 snat ip to 129.199.195.130-129.199.195.158
}
'';
};
};
firewall.allowedUDPPorts = [ 67 ];
firewall = {
allowedUDPPorts = [ 67 ];
checkReversePath = false;
};
};
boot.kernel.sysctl."net.ipv4.ip_forward" = true;

12
meta/network.nix
View file

@ -98,17 +98,7 @@
{
# see also machines/vault01/networking.nix
address = "129.199.195.129";
prefixLength = 27;
}
];
gateways = [ ];
enableDefaultDNS = true;
};
enp130s0f0 = {
ipv4 = [
{
address = "192.168.42.7";
prefixLength = 24;
prefixLength = 32;
}
];
gateways = [ ];