lbailly/infrastructure
1
0
Fork 0
forked from DGNum/infrastructure
Code Pull requests Activity

fix(vlans): activate things to bypass vlan limit

Browse source
This commit is contained in:
catvayor 2024-05-02 10:39:19 +02:00
parent 35ab7bfee3
commit f22580dd26
1 changed files with 23 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

30
machines/vault01/networking.nix
View file

@ -1,4 +1,5 @@
{
pkgs,
lib,
meta,
name,
@ -49,12 +50,11 @@ let
Id = vlan;
address = [ ];
extraNetwork = {
networkConfig.DHCPServer = "yes";
dhcpServerConfig = {
EmitRouter = true;
Router = "10.0.0.1";
EmitDNS = true;
DNS = "10.0.0.1";
networkConfig = {
LinkLocalAddressing = "no";
};
linkConfig = {
Promiscuous = true;
};
addresses = [
{
@ -118,7 +118,7 @@ let
extraNetwork.networkConfig.DHCPServer = "yes";
};
} // builtins.listToAttrs (builtins.genList mkUserVlan 10); # 850 when we can
} // builtins.listToAttrs (builtins.genList mkUserVlan 850); # 850 when we can
in
{
@ -151,6 +151,7 @@ in
};
"10-enp67s0f0np0" = {
name = "enp67s0f0np0";
linkConfig.Promiscuous = true;
networkConfig = {
VLAN = builtins.attrNames vlans;
@ -166,5 +167,20 @@ in
netdevs = mapAttrs' mkNetdev vlans;
};
systemd.services.ethtoolConfig = {
wantedBy = [ "systemd-networkd.service" ];
after = [ "sys-subsystem-net-devices-enp67s0f0np0.device" ];
bindsTo = [ "sys-subsystem-net-devices-enp67s0f0np0.device" ];
script = ''
${lib.getExe pkgs.ethtool} -K enp67s0f0np0 rxvlan off
${lib.getExe pkgs.ethtool} -K enp67s0f0np0 txvlan off
${lib.getExe pkgs.ethtool} -K enp67s0f0np0 rx-vlan-filter off
${lib.getExe pkgs.ethtool} -K enp67s0f0np0 rx-vlan-offload off
${lib.getExe pkgs.ethtool} -K enp67s0f0np0 tx-vlan-offload off
${lib.getExe pkgs.ethtool} -K enp67s0f0np0 tx-vlan-stag-hw-insert off
echo "Hardware for enp67s0f0np0 configured"
'';
};
networking.firewall.allowedUDPPorts = [ 67 ];
}