Simon Bruder
4f536a00d2
When having DNSSEC activated (as it is the case on sbruder.de), dnsmasq interfering in queries for hosts on the LAN often causes problems. This domain is specifically for the case of not having DNSSEC on it.
123 lines
2.4 KiB
Nix
123 lines
2.4 KiB
Nix
{ lib, ... }:
|
||
let
|
||
mkSubnet = v4: v6:
|
||
let
|
||
splitCidr = lib.splitString "/";
|
||
fst = lib.flip lib.elemAt 0;
|
||
snd = lib.flip lib.elemAt 1;
|
||
|
||
v4Split = splitCidr v4;
|
||
v6Split = splitCidr v6;
|
||
in
|
||
{
|
||
v4 = rec {
|
||
cidr = v4;
|
||
net = fst v4Split;
|
||
suffix = snd v4Split;
|
||
withoutLastComponent = lib.substring 0 ((lib.stringLength net) - 1) net;
|
||
gateway = "${withoutLastComponent}1";
|
||
gatewayCidr = "${gateway}/${suffix}";
|
||
};
|
||
v6 = rec {
|
||
cidr = v6;
|
||
net = fst v6Split;
|
||
suffix = snd v6Split;
|
||
gateway = "${net}1";
|
||
gatewayCidr = "${gateway}/${suffix}";
|
||
};
|
||
};
|
||
in
|
||
{
|
||
vlan = {
|
||
lan = {
|
||
id = 10;
|
||
subnet = mkSubnet "10.80.1.0/24" "fd00:80:1::/64";
|
||
domain = "lan.shinonome-lab.de";
|
||
};
|
||
management = {
|
||
id = 20;
|
||
subnet = mkSubnet "10.80.2.0/24" "fd00:80:2::/64";
|
||
domain = "management.shinonome-lab.de";
|
||
};
|
||
guest = {
|
||
id = 30;
|
||
subnet = mkSubnet "10.80.3.0/24" "fd00:80:3::/64";
|
||
domain = "guest.shinonome-lab.de";
|
||
};
|
||
iot = {
|
||
id = 40;
|
||
subnet = mkSubnet "10.80.4.0/24" "fd00:80:4::/64";
|
||
domain = "iot.shinonome-lab.de";
|
||
};
|
||
};
|
||
tc = {
|
||
interface = "enp1s0";
|
||
# 4160 kbit is slightly smaller than the average upload
|
||
rate = "4160kbit";
|
||
major = 1;
|
||
default = 2;
|
||
classes = [
|
||
# default
|
||
{
|
||
minor = 2;
|
||
rate = "800kbit";
|
||
prio = 50;
|
||
}
|
||
# DNS, small packets (e.g., TCP ACK)
|
||
{
|
||
minor = 3;
|
||
rate = "250kbit";
|
||
prio = 0;
|
||
qdiscArgs = [ "pfifo_fast" ];
|
||
}
|
||
# interactive SSH
|
||
{
|
||
minor = 4;
|
||
rate = "128kbit";
|
||
prio = 2;
|
||
}
|
||
# torrent
|
||
{
|
||
minor = 5;
|
||
rate = "250kbit";
|
||
ceil = "3000kbit";
|
||
prio = 100;
|
||
}
|
||
# HTTP
|
||
{
|
||
minor = 6;
|
||
rate = "1500kbit";
|
||
prio = 25;
|
||
}
|
||
# wg-home
|
||
{
|
||
minor = 7;
|
||
rate = "250kbit";
|
||
prio = 10;
|
||
}
|
||
# VoIP
|
||
{
|
||
minor = 8;
|
||
rate = "256kbit";
|
||
ceil = "384kbit";
|
||
prio = 3;
|
||
qdiscArgs = [ "pfifo_fast" ];
|
||
}
|
||
# Backup
|
||
{
|
||
minor = 9;
|
||
rate = "350kbit";
|
||
ceil = "3000kbit";
|
||
prio = 90;
|
||
}
|
||
# guest
|
||
{
|
||
minor = 10;
|
||
rate = "200kbit";
|
||
ceil = "2000kbit";
|
||
prio = 99;
|
||
}
|
||
];
|
||
};
|
||
}
|