commit c1f515547109a7e1845120449676ba6aa9a78fe9 · pyrox.dev/nixpkgs

nixos/doc/manual/from_md/release-notes/rl-2111.section.xml

···

       1548
        
                 Foo-over-UDP encapsulations.

     

       1549
        
               </para>

     

       1550
        
             </listitem>

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       1551
        
           </itemizedlist>

     

       1552
        
         </section>

     

       1553
        
       </section>

···

       1548
        
                 Foo-over-UDP encapsulations.

     

       1549
        
               </para>

     

       1550
        
             </listitem>

     

       1551
       +
             <listitem>

     

       1552
       +
               <para>

     

       1553
       +
                 <literal>networking.sits</literal> now supports Foo-over-UDP

     

       1554
       +
                 encapsulation.

     

       1555
       +
               </para>

     

       1556
       +
             </listitem>

     

       1557
        
           </itemizedlist>

     

       1558
        
         </section>

     

       1559
        
       </section>

nixos/doc/manual/release-notes/rl-2111.section.md

···

       447
        
       - The `systemd.network` module has gained support for the FooOverUDP link type.

     

       448
        
       

     

       449
        
       - The `networking` module has a new `networking.fooOverUDP` option to configure Foo-over-UDP encapsulations.

     

       0
        
       
     

       0

···

       447
        
       - The `systemd.network` module has gained support for the FooOverUDP link type.

     

       448
        
       

     

       449
        
       - The `networking` module has a new `networking.fooOverUDP` option to configure Foo-over-UDP encapsulations.

     

       450
       +
       

     

       451
       +
       - `networking.sits` now supports Foo-over-UDP encapsulation.

+6 -1

nixos/modules/tasks/network-interfaces-scripted.nix

···

       519
        
                       ${optionalString (v.remote != null) "remote \"${v.remote}\""} \

     

       520
        
                       ${optionalString (v.local != null) "local \"${v.local}\""} \

     

       521
        
                       ${optionalString (v.ttl != null) "ttl ${toString v.ttl}"} \

     

       522
       -
                       ${optionalString (v.dev != null) "dev \"${v.dev}\""}

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       523
        
                     ip link set "${n}" up

     

       524
        
                   '';

     

       525
        
                   postStop = ''

···

       519
        
                       ${optionalString (v.remote != null) "remote \"${v.remote}\""} \

     

       520
        
                       ${optionalString (v.local != null) "local \"${v.local}\""} \

     

       521
        
                       ${optionalString (v.ttl != null) "ttl ${toString v.ttl}"} \

     

       522
       +
                       ${optionalString (v.dev != null) "dev \"${v.dev}\""} \

     

       523
       +
                       ${optionalString (v.encapsulation != null)

     

       524
       +
                         "encap ${v.encapsulation.type} encap-dport ${toString v.encapsulation.port} ${

     

       525
       +
                           optionalString (v.encapsulation.sourcePort != null)

     

       526
       +
                             "encap-sport ${toString v.encapsulation.sourcePort}"

     

       527
       +
                         }"}

     

       528
        
                     ip link set "${n}" up

     

       529
        
                   '';

     

       530
        
                   postStop = ''

+11 -1

nixos/modules/tasks/network-interfaces-systemd.nix

···

       227
        
                     Local = sit.local;

     

       228
        
                   }) // (optionalAttrs (sit.ttl != null) {

     

       229
        
                     TTL = sit.ttl;

     

       230
       -
                   });

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       231
        
               };

     

       232
        
               networks = mkIf (sit.dev != null) {

     

       233
        
                 "40-${sit.dev}" = (mkMerge [ (genericNetwork (mkOverride 999)) {

···

       227
        
                     Local = sit.local;

     

       228
        
                   }) // (optionalAttrs (sit.ttl != null) {

     

       229
        
                     TTL = sit.ttl;

     

       230
       +
                   }) // (optionalAttrs (sit.encapsulation != null) (

     

       231
       +
                     {

     

       232
       +
                       FooOverUDP = true;

     

       233
       +
                       Encapsulation =

     

       234
       +
                         if sit.encapsulation.type == "fou"

     

       235
       +
                         then "FooOverUDP"

     

       236
       +
                         else "GenericUDPEncapsulation";

     

       237
       +
                       FOUDestinationPort = sit.encapsulation.port;

     

       238
       +
                     } // (optionalAttrs (sit.encapsulation.sourcePort != null) {

     

       239
       +
                       FOUSourcePort = sit.encapsulation.sourcePort;

     

       240
       +
                     })));

     

       241
        
               };

     

       242
        
               networks = mkIf (sit.dev != null) {

     

       243
        
                 "40-${sit.dev}" = (mkMerge [ (genericNetwork (mkOverride 999)) {

+40 -1

nixos/modules/tasks/network-interfaces.nix

···

       10
        
         hasVirtuals = any (i: i.virtual) interfaces;

     

       11
        
         hasSits = cfg.sits != { };

     

       12
        
         hasBonds = cfg.bonds != { };

     

       13
       -
         hasFous = cfg.fooOverUDP != { };

     

       0
        
       
     

       14
        
       

     

       15
        
         slaves = concatMap (i: i.interfaces) (attrValues cfg.bonds)

     

       16
        
           ++ concatMap (i: i.interfaces) (attrValues cfg.bridges)

     
···

       945
        
                   example = "enp4s0f0";

     

       946
        
                   description = ''

     

       947
        
                     The underlying network device on which the tunnel resides.

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       948
        
                   '';

     

       949
        
                 };

     

       950

···

       10
        
         hasVirtuals = any (i: i.virtual) interfaces;

     

       11
        
         hasSits = cfg.sits != { };

     

       12
        
         hasBonds = cfg.bonds != { };

     

       13
       +
         hasFous = cfg.fooOverUDP != { }

     

       14
       +
           || filterAttrs (_: s: s.encapsulation != null) cfg.sits != { };

     

       15
        
       

     

       16
        
         slaves = concatMap (i: i.interfaces) (attrValues cfg.bonds)

     

       17
        
           ++ concatMap (i: i.interfaces) (attrValues cfg.bridges)

     
···

       946
        
                   example = "enp4s0f0";

     

       947
        
                   description = ''

     

       948
        
                     The underlying network device on which the tunnel resides.

     

       949
       +
                   '';

     

       950
       +
                 };

     

       951
       +
       

     

       952
       +
                 encapsulation = with types; mkOption {

     

       953
       +
                   type = nullOr (submodule {

     

       954
       +
                     options = {

     

       955
       +
                       type = mkOption {

     

       956
       +
                         type = enum [ "fou" "gue" ];

     

       957
       +
                         description = ''

     

       958
       +
                           Selects encapsulation type. See

     

       959
       +
                           <citerefentry><refentrytitle>ip-link</refentrytitle>

     

       960
       +
                           <manvolnum>8</manvolnum></citerefentry> for details.

     

       961
       +
                         '';

     

       962
       +
                       };

     

       963
       +
       

     

       964
       +
                       port = mkOption {

     

       965
       +
                         type = port;

     

       966
       +
                         example = 9001;

     

       967
       +
                         description = ''

     

       968
       +
                           Destination port for encapsulated packets.

     

       969
       +
                         '';

     

       970
       +
                       };

     

       971
       +
       

     

       972
       +
                       sourcePort = mkOption {

     

       973
       +
                         type = nullOr types.port;

     

       974
       +
                         default = null;

     

       975
       +
                         example = 9002;

     

       976
       +
                         description = ''

     

       977
       +
                           Source port for encapsulated packets. Will be chosen automatically by

     

       978
       +
                           the kernel if unset.

     

       979
       +
                         '';

     

       980
       +
                       };

     

       981
       +
                     };

     

       982
       +
                   });

     

       983
       +
                   default = null;

     

       984
       +
                   example = { type = "fou"; port = 9001; };

     

       985
       +
                   description = ''

     

       986
       +
                     Configures encapsulation in UDP packets.

     

       987
        
                   '';

     

       988
        
                 };

     

       989

+24 -3

nixos/tests/networking.nix

···

       431
        
               virtualisation.vlans = [ 1 ];

     

       432
        
               networking = {

     

       433
        
                 useNetworkd = networkd;

     

       434
       -
                 firewall.enable = false;

     

       435
        
                 useDHCP = false;

     

       436
        
                 sits.sit = {

     

       437
        
                   inherit remote;

     
···

       446
        
             };

     

       447
        
           in {

     

       448
        
             name = "Sit";

     

       449
       -
             nodes.client1 = node { address4 = "192.168.1.1"; remote = "192.168.1.2"; address6 = "fc00::1"; };

     

       450
       -
             nodes.client2 = node { address4 = "192.168.1.2"; remote = "192.168.1.1"; address6 = "fc00::2"; };

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       451
        
             testScript = { ... }:

     

       452
        
               ''

     

       453
        
                 start_all()

···

       431
        
               virtualisation.vlans = [ 1 ];

     

       432
        
               networking = {

     

       433
        
                 useNetworkd = networkd;

     

       0
        
       
     

       434
        
                 useDHCP = false;

     

       435
        
                 sits.sit = {

     

       436
        
                   inherit remote;

     
···

       445
        
             };

     

       446
        
           in {

     

       447
        
             name = "Sit";

     

       448
       +
             # note on firewalling: the two nodes are explicitly asymmetric.

     

       449
       +
             # client1 sends SIT packets in UDP, but accepts only proto-41 incoming.

     

       450
       +
             # client2 does the reverse, sending in proto-41 and accepting only UDP incoming.

     

       451
       +
             # that way we'll notice when either SIT itself or FOU breaks.

     

       452
       +
             nodes.client1 = args@{ pkgs, ... }:

     

       453
       +
               mkMerge [

     

       454
       +
                 (node { address4 = "192.168.1.1"; remote = "192.168.1.2"; address6 = "fc00::1"; } args)

     

       455
       +
                 {

     

       456
       +
                   networking = {

     

       457
       +
                     firewall.extraCommands = "iptables -A INPUT -p 41 -j ACCEPT";

     

       458
       +
                     sits.sit.encapsulation = { type = "fou"; port = 9001; };

     

       459
       +
                   };

     

       460
       +
                 }

     

       461
       +
               ];

     

       462
       +
             nodes.client2 = args@{ pkgs, ... }:

     

       463
       +
               mkMerge [

     

       464
       +
                 (node { address4 = "192.168.1.2"; remote = "192.168.1.1"; address6 = "fc00::2"; } args)

     

       465
       +
                 {

     

       466
       +
                   networking = {

     

       467
       +
                     firewall.allowedUDPPorts = [ 9001 ];

     

       468
       +
                     fooOverUDP.fou1 = { port = 9001; protocol = 41; };

     

       469
       +
                   };

     

       470
       +
                 }

     

       471
       +
               ];

     

       472
        
             testScript = { ... }:

     

       473
        
               ''

     

       474
        
                 start_all()