[READY] - dev-server to support bond and vlans for test environment #809
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
sarcasticadmin
force-pushed
the
rh/issue-807
branch
from
24efa91 to
0df594c
Compare
owendelong
force-pushed
the
rh/issue-807
branch
from
0df594c to
24efa91
Compare
Without this a `nixos-rebuild switch` would hang until the systemd.network.wait-online service timedout and failed to start. Co-authored-by: Owen DeLong <[email protected]>
sarcasticadmin
force-pushed
the
rh/issue-807
branch
3 times, most recently
from
b5463f1 to
fb38bfb
Compare
This change introduces a 4 nic LACP and bridges for each expo vlan. This allows the tech team the ability to test across any of the networks we deploy in the expo building. Most likely we will only be using the management vlan (vlan103) initially. Co-authored-by: Owen DeLong <[email protected]>
This might be problematic if we try to pass bridges into a hypervisor which want ipv6 addresses. But we'll cross that "bridge" when we get to it. Co-authored-by: Owen DeLong <[email protected]>
…stuff TODO: this would probably be disabled across the board for all ipv6 nixos hosts. Co-authored-by: Owen DeLong <[email protected]>
Unlike the hypervisors during the show: The dev-server has multiple networks that its apart of: HE Tunnel + Scale Expo Network. Thus we must be explicit about which route the entire 10.0.0.0/8 should take. Co-authored-by: Owen DeLong <[email protected]>
Explicit routes for ipv6 since we have multiple networks in the colo at HE: HE itself and Scale Expo Network. Co-authored-by: Owen DeLong <[email protected]>
sarcasticadmin
force-pushed
the
rh/issue-807
branch
from
fb38bfb to
e98c5da
Compare
sarcasticadmin
changed the title
sarcasticadmin
requested review from
owendelong,
ruebenramirez,
kylerisse,
djacu and
MatthewCroughan
| enable = true; | ||
| netdevs = { |
There was a problem hiding this comment.
I wasn't familiar with netdev configuration, so thanks for the TIL! :)
ruebenramirez
approved these changes
Jan 22, 2025
kylerisse
approved these changes
Jan 22, 2025
There was a problem hiding this comment.
Looks great! Way more VLANs than I was expecting. Will help if we ever want to test implementing proper ACLs and test from any subnet. Awesome work @owendelong and @sarcasticadmin !
| "net.ipv6.conf.bridge112.autoconf" = false; | ||
| "net.ipv6.conf.bridge499.autoconf" = false; | ||
| # completely disable IPv6 temporary addresses | ||
| "net.ipv6.conf.default.use_tempaddr" = lib.mkForce 0; |
Totally agree here. This could have been a really ugly combination of attribute set and map function or something even more sinister. |
|
Thanks for the reviews @ruebenramirez and @kylerisse . Glad you both appreciate the approach |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description of PR
Relates to #807
In an effort to stand up a working ipv6 network with a expo network configuration on the dev-server in the colo. We've added a 4 port LACP interface
bond0with VLANs to simulate expo building along with the various out network configuration that was needed.Previous Behavior
New Behavior
bond0interfacebond0interface10.0.3.5for the dev-server10.0.0.0/8and2001:470:f026::/48networksTests
nixos-rebuild switch --flake github:socallinuxexpo/scale-network/rh/issue-807-dhcp#devServer --refreshworks cleanlybond0to HE gateway