feat: route tos traffic via rossby (for now)

This commit is contained in:
2025-10-10 18:27:30 +02:00
parent bb56b8f3a6
commit 8d1d892f25
4 changed files with 96 additions and 4 deletions

75
rossby/0np0) Normal file
View File

@@ -0,0 +1,75 @@
Global
 Protocols: +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
 resolv.conf mode: uplink
 Current DNS Server: 172.16.239.221
 DNS Servers: 172.16.239.221
Fallback DNS Servers: 1.1.1.1 1.0.0.1
 DNS Domain: cluster.local
Link 2 (enp129s0f0)
 Current Scopes: none
 Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
 Default Route: no
Link 3 (enp129s0f1)
 Current Scopes: none
 Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
 Default Route: no
Link 4 (enp129s0f2)
 Current Scopes: none
 Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
 Default Route: no
Link 5 (enp129s0f3)
 Current Scopes: none
 Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
 Default Route: no
Link 6 (enp65s0np0)
 Current Scopes: LLMNR/IPv4 LLMNR/IPv6
 Protocols: -DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
 Default Route: no
Link 7 (ibp1s0)
 Current Scopes: LLMNR/IPv4 LLMNR/IPv6
 Protocols: -DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
 Default Route: no
Link 8 (tailscale0)
 Current Scopes: DNS
 Protocols: +DefaultRoute -LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
Current DNS Server: 100.100.100.100
 DNS Servers: 100.100.100.100
 DNS Domain: ts.obx ~.
 Default Route: yes
Link 9 (docker0)
 Current Scopes: none
 Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
 Default Route: no
Link 10 (flannel.1)
 Current Scopes: LLMNR/IPv4 LLMNR/IPv6 mDNS/IPv4 mDNS/IPv6
 Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
 Default Route: no
Link 11 (mynet)
 Current Scopes: LLMNR/IPv4 LLMNR/IPv6 mDNS/IPv4 mDNS/IPv6
 Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
 Default Route: no
Link 12 (veth1a3b1bd2)
 Current Scopes: LLMNR/IPv6 mDNS/IPv6
 Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
 Default Route: no
Link 13 (vethd8099318)
 Current Scopes: LLMNR/IPv6 mDNS/IPv6
 Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
 Default Route: no
Link 14 (vethe761a9b1)
 Current Scopes: LLMNR/IPv6 mDNS/IPv6
 Protocols: -DefaultRoute +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
 Default Route: no

View File

@@ -64,7 +64,13 @@ let
"40-${host.iface}" = {
matchConfig.Name = host.iface;
address = [ "${host.address}/24" ];
routes = [ { Gateway = "172.16.239.1"; } ];
routes = [
{ Gateway = "172.16.239.1"; }
{
Destination = "10.255.241.0/24";
Gateway = "172.16.239.221";
}
];
};
# "ibp1s0.7666" = {
"45-ibp1s0" = {

View File

@@ -119,7 +119,13 @@ in {
matchConfig.Name = "enp1s0np0";
DHCP = "no";
address = [ "${address}/24" ];
routes = [ { Gateway = "172.16.239.1"; } ];
routes = [
{ Gateway = "172.16.239.1"; }
{
Destination = "10.255.241.0/24";
Gateway = "172.16.239.221";
}
];
};
};

View File

@@ -114,7 +114,6 @@ in
networking = {
useNetworkd = true;
hostName = name;
nameservers = [ "8.8.8.8" "8.8.4.4" ];
firewall = {
allowedTCPPorts = [ 6443 ];
extraCommands = ''
@@ -127,7 +126,13 @@ in
networks."40-enp65s0np0" = {
matchConfig.Name = "enp65s0np0";
address = [ "${address}/24" ];
routes = [ { Gateway = "172.16.239.1"; } ];
routes = [
{ Gateway = "172.16.239.1"; }
{
Destination = "10.255.241.0/24";
Gateway = "172.16.239.221";
}
];
};
};