patrick/nix-config
1
1
Fork 0
Code Issues Pull requests Projects Wiki Activity

feat: enable mdns forward

Browse source
This commit is contained in:
Patrick 2024-12-23 14:28:22 +01:00
parent bdf7180a13
commit 29b100e13e
Signed by: patrick
GPG key ID: 451F95EFB8BECD0F
2 changed files with 24 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

27
hosts/nucnix/forwarding.nix
View file

@ -83,12 +83,25 @@ mkMerge [
protocol = "udp";
})
{
networking.nftables.chains.prerouting.mdns-forward = {
after = [ "hook" ];
rules = [
# "iifname lan-home ip daddr 224.0.0.251 ip saddr set ${net.cidr.host 1 globals.net.vlans.services.cidrv4} dup to 224.0.0.251 device lan-services notrack"
# "iifname lan-services ip daddr 224.0.0.251 ip saddr set ${net.cidr.host 1 globals.net.vlans.home.cidrv4} dup to 224.0.0.251 device lan-home notrack"
];
};
networking.nftables.ruleset = ''
table ip mdns {
chain prerouting {
type filter hook prerouting priority mangle; policy accept;
iifname {lan-home, lan-services} ip daddr 224.0.0.251 meta mark 0xa5f3 jump mdns-saddr
iifname {lan-home, lan-services} ip daddr 224.0.0.251 meta mark != 0xa5f3 jump mdns
}
chain mdns {
meta mark set 0xa5f3
iifname lan-services dup to 224.0.0.251 device lan-home
iifname lan-home dup to 224.0.0.251 device lan-services
}
chain mdns-saddr {
# repeat mDNS from IoT to main
iifname lan-services ip saddr set 10.99.20.1
iifname lan-home ip saddr set 10.99.10.1
}
}
'';
}
]

5
hosts/nucnix/net.nix
View file

@ -136,7 +136,10 @@ in
snippets.nnf-ssh.enable = lib.mkForce false;
rules = {
mdns = {
from = [ "home" ];
from = [
"home"
"services"
];
to = [ "local" ];
allowedUDPPorts = [ 5353 ];
};