lukegb/depot
1
0
Fork 0
Code Issues 1 Pull requests Projects Packages Activity Actions

blade-tuvok: set bgp_local_prefs

Browse source
This commit is contained in:
Luke Granger-Brown 2021-09-10 20:46:05 +00:00
parent dbf906a9a7
commit cb7811898c
2 changed files with 15 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
ops/nixos/lib/bgp.nix
View file

@ -14,6 +14,7 @@ let
{ {
if ! (avoid_martians4()) then reject; if ! (avoid_martians4()) then reject;
${if ix.remote.must_be_next_hop then "if (bgp_path.first != ${toString ix.remote.asn}) then reject;" else "# no next-hop requirement"} ${if ix.remote.must_be_next_hop then "if (bgp_path.first != ${toString ix.remote.asn}) then reject;" else "# no next-hop requirement"}
bgp_local_pref = ${toString ix.remote.bgp_local_pref};
accept; accept;
} }
filter bgp_in_${ixName}6 filter bgp_in_${ixName}6
@ -22,6 +23,7 @@ let
{ {
if ! (avoid_martians6()) then reject; if ! (avoid_martians6()) then reject;
${if ix.remote.must_be_next_hop then "if (bgp_path.first != ${toString ix.remote.asn}) then reject;" else "# no next-hop requirement"} ${if ix.remote.must_be_next_hop then "if (bgp_path.first != ${toString ix.remote.asn}) then reject;" else "# no next-hop requirement"}
bgp_local_pref = ${toString ix.remote.bgp_local_pref};
accept; accept;
} }
protocol pipe ${ixName}pipe_4 { protocol pipe ${ixName}pipe_4 {
@ -139,6 +141,10 @@ in {
type = bool; type = bool;
default = true; default = true;
}; };
bgp_local_pref = mkOption { # lukegbgp.config.peering.<foo>.remote.bgp_local_pref
type = int;
default = 100;
};
routers = mkOption { # lukegbgp.config.peering.<foo>.remote.routers routers = mkOption { # lukegbgp.config.peering.<foo>.remote.routers
type = listOf (submodule { type = listOf (submodule {
options = { options = {

10
ops/nixos/lib/blade-router.nix
View file

@ -138,6 +138,7 @@ in
remote = { remote = {
asn = 3170; asn = 3170;
export_community = 4001; export_community = 4001;
bgp_local_pref = 101;
routers = [{ routers = [{
v4 = config.my.blade-router.addresses.linknet.v4.remote; v4 = config.my.blade-router.addresses.linknet.v4.remote;
v6 = config.my.blade-router.addresses.linknet.v6.remote; v6 = config.my.blade-router.addresses.linknet.v6.remote;
@ -170,6 +171,7 @@ in
v4 = "195.66.225.231"; v4 = "195.66.225.231";
v6 = "2001:7f8:4::220a:2"; v6 = "2001:7f8:4::220a:2";
}]; }];
bgp_local_pref = 109;
must_be_next_hop = false; must_be_next_hop = false;
}; };
}; };
@ -209,6 +211,7 @@ in
v4 = "195.66.225.53"; v4 = "195.66.225.53";
v6 = "2001:7f8:4::5052:1"; v6 = "2001:7f8:4::5052:1";
}]; }];
bgp_local_pref = 110;
prefix_limit.v4 = 16000; prefix_limit.v4 = 16000;
prefix_limit.v6 = 3000; prefix_limit.v6 = 3000;
}; };
@ -217,7 +220,8 @@ in
remote = { remote = {
asn = 212895; asn = 212895;
export_community = 5004; export_community = 5004;
passive = true; # pending passive = true; # pending v6
bgp_local_pref = 100;
routers = [{ routers = [{
enabled = cfg.linx.enable; enabled = cfg.linx.enable;
v4 = "195.66.225.105"; v4 = "195.66.225.105";
@ -234,6 +238,7 @@ in
v4 = "195.66.224.21"; v4 = "195.66.224.21";
v6 = "2001:7f8:4::1b1b:1"; v6 = "2001:7f8:4::1b1b:1";
}]; }];
bgp_local_pref = 110;
prefix_limit.v4 = 176000; prefix_limit.v4 = 176000;
prefix_limit.v6 = 156000; prefix_limit.v6 = 156000;
}; };
@ -248,6 +253,7 @@ in
v4 = "195.66.227.14"; v4 = "195.66.227.14";
v6 = "2001:7f8:4::f320:1"; v6 = "2001:7f8:4::f320:1";
}]; }];
bgp_local_pref = 120;
prefix_limit.v4 = 1000; prefix_limit.v4 = 1000;
prefix_limit.v6 = 1000; prefix_limit.v6 = 1000;
}; };
@ -261,6 +267,7 @@ in
v4 = "195.66.224.125"; v4 = "195.66.224.125";
v6 = "2001:7f8:4::3b41:1"; v6 = "2001:7f8:4::3b41:1";
}]; }];
bgp_local_pref = 120;
prefix_limit.v4 = 15000; prefix_limit.v4 = 15000;
prefix_limit.v6 = 10000; prefix_limit.v6 = 10000;
}; };
@ -274,6 +281,7 @@ in
v4 = "195.66.225.179"; v4 = "195.66.225.179";
v6 = "2001:7f8:4::3417:1"; v6 = "2001:7f8:4::3417:1";
}]; }];
bgp_local_pref = 120;
prefix_limit.v4 = 20000; prefix_limit.v4 = 20000;
prefix_limit.v6 = 2000; prefix_limit.v6 = 2000;
}; };