Move IPv6 config to wendy
Eelco Dolstra committed
Jun 7, 2013 at 18:55 UTC
8080667330f47e2f0b07cdc7773c0db68ea929b0
1 file changed
+42
delft/wendy.nix
+42
@@ -115,6 +115,16 @@ in
115
ACTION=="add", SUBSYSTEM=="net", ATTR{address}=="f0:4d:a2:40:1b:c0", NAME="internal"
116
'';
117
118
+ services.radvd.enable = true;
119
+ services.radvd.config =
120
+ ''
121
+ interface internal {
122
+ AdvSendAdvert on;
123
+ prefix 2001:610:685:1::/64 { };
124
+ RDNSS 2001:610:685:1::1 { };
125
+ };
126
+ '';
127
+
128
networking = {
129
hostName = "wendy";
130
domain = "buildfarm";
@@ -148,6 +158,38 @@ in
158
nat.internalIPs = "192.168.1.0/22";
159
nat.externalInterface = "external";
160
nat.externalIP = myIP;
161
+
162
+ localCommands =
163
+ ''
164
+ #${pkgs.iptables}/sbin/iptables -t nat -F PREROUTING
165
+
166
+ # lucifer ssh (to give Karl/Armijn access for the BAT project)
167
+ #${pkgs.iptables}/sbin/iptables -t nat -A PREROUTING -p tcp -d ${myIP} --dport 2222 -j DNAT --to 192.168.1.26:22
168
+
169
+ # Cleanup.
170
+ ip -6 route flush dev sixxs || true
171
+ ip link set dev sixxs down || true
172
+ ip tunnel del sixxs || true
173
+
174
+ # Set up a SixXS tunnel for IPv6 connectivity.
175
+ ip tunnel add sixxs mode sit local ${myIP} remote 192.87.102.107 ttl 64
176
+ ip link set dev sixxs mtu 1280 up
177
+ ip -6 addr add 2001:610:600:88d::2/64 dev sixxs
178
+ ip -6 route add default via 2001:610:600:88d::1 dev sixxs
179
+
180
+ # Discard all traffic to networks in our prefix that don't exist.
181
+ ip -6 route add 2001:610:685::/48 dev lo || true
182
+
183
+ # Create a local network (prefix:1::/64).
184
+ ip -6 addr add 2001:610:685:1::1/64 dev internal || true
185
+
186
+ # Forward traffic to our Nova cloud to "stan".
187
+ ip -6 route add 2001:610:685:2::/64 via 2001:610:685:1:222:19ff:fe55:bf2e || true
188
+
189
+ # Amazon MTurk experiment.
190
+ #${pkgs.iptables}/sbin/iptables -t nat -A PREROUTING -p tcp -d ${myIP} --dport 5998 -j DNAT --to 192.168.1.26:5998
191
+ #${pkgs.iptables}/sbin/iptables -t nat -A PREROUTING -p tcp -d ${myIP} --dport 5999 -j DNAT --to 192.168.1.26:5999
192
+ '';
193
};
194
195
jobs.dnsmasq =