feat: route tos traffic via rossby (for now)

rossby/0np0)

@@ -0,0 +1,75 @@
+Global
+           Protocols: +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
+    resolv.conf mode: uplink
+  Current DNS Server: 172.16.239.221
+         DNS Servers: 172.16.239.221
+Fallback DNS Servers: 1.1.1.1 1.0.0.1
+          DNS Domain: cluster.local
+
+Link 2 (enp129s0f0)
+    Current Scopes: none
+         Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
+     Default Route: no
+
+Link 3 (enp129s0f1)
+    Current Scopes: none
+         Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
+     Default Route: no
+
+Link 4 (enp129s0f2)
+    Current Scopes: none
+         Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
+     Default Route: no
+
+Link 5 (enp129s0f3)
+    Current Scopes: none
+         Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
+     Default Route: no
+
+Link 6 (enp65s0np0)
+    Current Scopes: LLMNR/IPv4 LLMNR/IPv6
+         Protocols: -DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
+     Default Route: no
+
+Link 7 (ibp1s0)
+    Current Scopes: LLMNR/IPv4 LLMNR/IPv6
+         Protocols: -DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
+     Default Route: no
+
+Link 8 (tailscale0)
+    Current Scopes: DNS
+         Protocols: +DefaultRoute -LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
+Current DNS Server: 100.100.100.100
+       DNS Servers: 100.100.100.100
+        DNS Domain: ts.obx ~.
+     Default Route: yes
+
+Link 9 (docker0)
+    Current Scopes: none
+         Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
+     Default Route: no
+
+Link 10 (flannel.1)
+    Current Scopes: LLMNR/IPv4 LLMNR/IPv6 mDNS/IPv4 mDNS/IPv6
+         Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
+     Default Route: no
+
+Link 11 (mynet)
+    Current Scopes: LLMNR/IPv4 LLMNR/IPv6 mDNS/IPv4 mDNS/IPv6
+         Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
+     Default Route: no
+
+Link 12 (veth1a3b1bd2)
+    Current Scopes: LLMNR/IPv6 mDNS/IPv6
+         Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
+     Default Route: no
+
+Link 13 (vethd8099318)
+    Current Scopes: LLMNR/IPv6 mDNS/IPv6
+         Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
+     Default Route: no
+
+Link 14 (vethe761a9b1)
+    Current Scopes: LLMNR/IPv6 mDNS/IPv6
+         Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
+     Default Route: no

rossby/c0/default.nix

@@ -64,7 +64,13 @@ let
           "40-${host.iface}" = {
             matchConfig.Name = host.iface;
             address = [ "${host.address}/24" ];
-            routes = [ { Gateway = "172.16.239.1"; } ];
+            routes = [
+              { Gateway = "172.16.239.1"; }
+              {
+                Destination = "10.255.241.0/24";
+                Gateway = "172.16.239.221";
+              }
+            ];
           };
         # "ibp1s0.7666" = {
           "45-ibp1s0" = {

rossby/fs-work/default.nix

@@ -119,7 +119,13 @@ in {
         matchConfig.Name = "enp1s0np0";
         DHCP = "no";
         address = [ "${address}/24" ];
-        routes = [ { Gateway = "172.16.239.1"; } ];
+        routes = [
+          { Gateway = "172.16.239.1"; }
+          {
+            Destination = "10.255.241.0/24";
+            Gateway = "172.16.239.221";
+          }
+        ];
       };
     };
 

rossby/login/default.nix

@@ -114,7 +114,6 @@ in
     networking = {
       useNetworkd = true;
       hostName = name;
-      nameservers = [ "8.8.8.8" "8.8.4.4" ];
       firewall = {
         allowedTCPPorts = [ 6443 ];
         extraCommands = ''
@@ -127,7 +126,13 @@ in
       networks."40-enp65s0np0" = {
         matchConfig.Name = "enp65s0np0";
         address = [ "${address}/24" ];
-        routes = [ { Gateway = "172.16.239.1"; } ];
+        routes = [
+          { Gateway = "172.16.239.1"; }
+          {
+            Destination = "10.255.241.0/24";
+            Gateway = "172.16.239.221";
+          }
+        ];
       };
     };