lukegb/depot
1
0
Fork 0
Code Issues 1 Pull requests Projects Packages Activity Actions

ops/nixos/lib/bgp: disable rp filtering on hosts running BGP

Browse source
This commit is contained in:
Luke Granger-Brown 2021-07-17 14:29:04 +00:00
parent 02bd3e4d31
commit 9dfb1d205d
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
ops/nixos/lib/bgp.nix
View file

@ -214,6 +214,7 @@ in {
}; };
networking.firewall.allowedTCPPorts = lib.mkIf config.services.lukegbgp.enable (lib.mkAfter [ 179 ]); networking.firewall.allowedTCPPorts = lib.mkIf config.services.lukegbgp.enable (lib.mkAfter [ 179 ]);
networking.firewall.checkReversePath = false;
boot.kernel.sysctl = { boot.kernel.sysctl = {
"net.ipv6.conf.default.accept_ra" = 0; "net.ipv6.conf.default.accept_ra" = 0;