talexander/machine_setup
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Allow node-to-node communication.

Browse Source
This commit is contained in:
Tom Alexander
2026-04-26 12:44:24 -04:00
parent da82a8c494
commit 9de8c853e3
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
nix/kubernetes/roles/firewall/default.nix
View File

@@ -49,6 +49,13 @@
'' ''
ip6 saddr 2620:11f:7001:7:ffff:eeee::/96 accept ip6 saddr 2620:11f:7001:7:ffff:eeee::/96 accept
'' ''
# Allow node-to-node communication
# Needed for:
# - metallb port 7946
''
iifname "enp*" ip saddr 10.215.1.0/24 ip daddr 10.215.1.0/24 accept
iifname "enp*" ip6 saddr 2620:11f:7001:7:ffff:ffff:0ad7:0100/120 ip6 daddr 2620:11f:7001:7:ffff:ffff:0ad7:0100/120 accept
''
]; ];
# networking.firewall.extraInputRules = '' # networking.firewall.extraInputRules = ''