patrick/nix-config
1
1
Fork 0
Code Issues Pull requests Projects Wiki Activity

feat: enable mdns forward

Browse source
This commit is contained in:
Patrick 2024-12-23 14:28:22 +01:00
parent bdf7180a13
commit 29b100e13e
Signed by: patrick
GPG key ID: 451F95EFB8BECD0F
2 changed files with 24 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

27
hosts/nucnix/forwarding.nix
View file

@ -83,12 +83,25 @@ mkMerge [
protocol = "udp"; protocol = "udp";
}) })
{ {
networking.nftables.chains.prerouting.mdns-forward = { networking.nftables.ruleset = ''
after = [ "hook" ]; table ip mdns {
rules = [ chain prerouting {
# "iifname lan-home ip daddr 224.0.0.251 ip saddr set ${net.cidr.host 1 globals.net.vlans.services.cidrv4} dup to 224.0.0.251 device lan-services notrack" type filter hook prerouting priority mangle; policy accept;
# "iifname lan-services ip daddr 224.0.0.251 ip saddr set ${net.cidr.host 1 globals.net.vlans.home.cidrv4} dup to 224.0.0.251 device lan-home notrack"
]; iifname {lan-home, lan-services} ip daddr 224.0.0.251 meta mark 0xa5f3 jump mdns-saddr
}; iifname {lan-home, lan-services} ip daddr 224.0.0.251 meta mark != 0xa5f3 jump mdns
}
chain mdns {
meta mark set 0xa5f3
iifname lan-services dup to 224.0.0.251 device lan-home
iifname lan-home dup to 224.0.0.251 device lan-services
}
chain mdns-saddr {
# repeat mDNS from IoT to main
iifname lan-services ip saddr set 10.99.20.1
iifname lan-home ip saddr set 10.99.10.1
}
}
'';
} }
] ]

5
hosts/nucnix/net.nix
View file

@ -136,7 +136,10 @@ in
snippets.nnf-ssh.enable = lib.mkForce false; snippets.nnf-ssh.enable = lib.mkForce false;
rules = { rules = {
mdns = { mdns = {
from = [ "home" ]; from = [
"home"
"services"
];
to = [ "local" ]; to = [ "local" ];
allowedUDPPorts = [ 5353 ]; allowedUDPPorts = [ 5353 ];
}; };