diff --git a/ops/nixos/lib/bgp.nix b/ops/nixos/lib/bgp.nix index d05dfbf883..b41085f8e0 100644 --- a/ops/nixos/lib/bgp.nix +++ b/ops/nixos/lib/bgp.nix @@ -292,9 +292,7 @@ in { bgp_ext_community.add((ro, 205479, 5005)); bgp_ext_community.add((ro, 205479, 5006)); bgp_ext_community.add((ro, 205479, 5007)); - - # do not export to facebook - bgp_ext_community.add((rt, 0, 32934)); + bgp_ext_community.add((ro, 205479, 5008)); accept; }; @@ -322,9 +320,7 @@ in { bgp_ext_community.add((ro, 205479, 5005)); # he from blade-tuvok bgp_ext_community.add((ro, 205479, 5006)); # clouvider from blade-tuvok bgp_ext_community.add((ro, 205479, 5007)); # google from blade-tuvok - - # do not export to facebook - bgp_ext_community.add((rt, 0, 32934)); + bgp_ext_community.add((ro, 205479, 5008)); # cloudflare from blade-tuvok accept; }; diff --git a/ops/nixos/lib/blade-router.nix b/ops/nixos/lib/blade-router.nix index 5b97630f2b..8e4f139c14 100644 --- a/ops/nixos/lib/blade-router.nix +++ b/ops/nixos/lib/blade-router.nix @@ -265,6 +265,19 @@ in prefix_limit.v6 = 10000; }; }; + peering.cloudflare = linx // { + remote = { + asn = 13337; + export_community = 5008; + routers = [{ + enabled = cfg.linx.enable; + v4 = "195.66.225.179"; + v6 = "2001:7f8:4::3417:1"; + }]; + prefix_limit.v4 = 20000; + prefix_limit.v6 = 2000; + }; + }; export.v4 = [ "92.118.28.0/24" ]; export.v6 = [ "2a09:a441::/32" ]; };