From dbf906a9a7b7d8a6d68e340004389dac86824fd5 Mon Sep 17 00:00:00 2001 From: Luke Granger-Brown Date: Fri, 10 Sep 2021 20:23:24 +0000 Subject: [PATCH] blade-router: add cloudflare --- ops/nixos/lib/bgp.nix | 8 ++------ ops/nixos/lib/blade-router.nix | 13 +++++++++++++ 2 files changed, 15 insertions(+), 6 deletions(-) diff --git a/ops/nixos/lib/bgp.nix b/ops/nixos/lib/bgp.nix index d05dfbf883..b41085f8e0 100644 --- a/ops/nixos/lib/bgp.nix +++ b/ops/nixos/lib/bgp.nix @@ -292,9 +292,7 @@ in { bgp_ext_community.add((ro, 205479, 5005)); bgp_ext_community.add((ro, 205479, 5006)); bgp_ext_community.add((ro, 205479, 5007)); - - # do not export to facebook - bgp_ext_community.add((rt, 0, 32934)); + bgp_ext_community.add((ro, 205479, 5008)); accept; }; @@ -322,9 +320,7 @@ in { bgp_ext_community.add((ro, 205479, 5005)); # he from blade-tuvok bgp_ext_community.add((ro, 205479, 5006)); # clouvider from blade-tuvok bgp_ext_community.add((ro, 205479, 5007)); # google from blade-tuvok - - # do not export to facebook - bgp_ext_community.add((rt, 0, 32934)); + bgp_ext_community.add((ro, 205479, 5008)); # cloudflare from blade-tuvok accept; }; diff --git a/ops/nixos/lib/blade-router.nix b/ops/nixos/lib/blade-router.nix index 5b97630f2b..8e4f139c14 100644 --- a/ops/nixos/lib/blade-router.nix +++ b/ops/nixos/lib/blade-router.nix @@ -265,6 +265,19 @@ in prefix_limit.v6 = 10000; }; }; + peering.cloudflare = linx // { + remote = { + asn = 13337; + export_community = 5008; + routers = [{ + enabled = cfg.linx.enable; + v4 = "195.66.225.179"; + v6 = "2001:7f8:4::3417:1"; + }]; + prefix_limit.v4 = 20000; + prefix_limit.v6 = 2000; + }; + }; export.v4 = [ "92.118.28.0/24" ]; export.v6 = [ "2a09:a441::/32" ]; };