lbailly/infrastructure
1
0
Fork 0
forked from DGNum/infrastructure
Code Pull requests Activity

fix(vlans): activate things to bypass vlan limit

Browse source
This commit is contained in:
catvayor 2024-05-02 10:39:19 +02:00
parent 35ab7bfee3
commit f22580dd26
1 changed files with 23 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

30
machines/vault01/networking.nix
View file

@ -1,4 +1,5 @@
{ {
pkgs,
lib, lib,
meta, meta,
name, name,
@ -49,12 +50,11 @@ let
Id = vlan; Id = vlan;
address = [ ]; address = [ ];
extraNetwork = { extraNetwork = {
networkConfig.DHCPServer = "yes"; networkConfig = {
dhcpServerConfig = { LinkLocalAddressing = "no";
EmitRouter = true; };
Router = "10.0.0.1"; linkConfig = {
EmitDNS = true; Promiscuous = true;
DNS = "10.0.0.1";
}; };
addresses = [ addresses = [
{ {
@ -118,7 +118,7 @@ let
extraNetwork.networkConfig.DHCPServer = "yes"; extraNetwork.networkConfig.DHCPServer = "yes";
}; };
} // builtins.listToAttrs (builtins.genList mkUserVlan 10); # 850 when we can } // builtins.listToAttrs (builtins.genList mkUserVlan 850); # 850 when we can
in in
{ {
@ -151,6 +151,7 @@ in
}; };
"10-enp67s0f0np0" = { "10-enp67s0f0np0" = {
name = "enp67s0f0np0"; name = "enp67s0f0np0";
linkConfig.Promiscuous = true;
networkConfig = { networkConfig = {
VLAN = builtins.attrNames vlans; VLAN = builtins.attrNames vlans;
@ -166,5 +167,20 @@ in
netdevs = mapAttrs' mkNetdev vlans; netdevs = mapAttrs' mkNetdev vlans;
}; };
systemd.services.ethtoolConfig = {
wantedBy = [ "systemd-networkd.service" ];
after = [ "sys-subsystem-net-devices-enp67s0f0np0.device" ];
bindsTo = [ "sys-subsystem-net-devices-enp67s0f0np0.device" ];
script = ''
${lib.getExe pkgs.ethtool} -K enp67s0f0np0 rxvlan off
${lib.getExe pkgs.ethtool} -K enp67s0f0np0 txvlan off
${lib.getExe pkgs.ethtool} -K enp67s0f0np0 rx-vlan-filter off
${lib.getExe pkgs.ethtool} -K enp67s0f0np0 rx-vlan-offload off
${lib.getExe pkgs.ethtool} -K enp67s0f0np0 tx-vlan-offload off
${lib.getExe pkgs.ethtool} -K enp67s0f0np0 tx-vlan-stag-hw-insert off
echo "Hardware for enp67s0f0np0 configured"
'';
};
networking.firewall.allowedUDPPorts = [ 67 ]; networking.firewall.allowedUDPPorts = [ 67 ];
} }