nixos

commit ee5636ef5d0d6e1d5a1154ea8be51da242ecee32
parent a613596f11773ba517a09292d655c24a766e54b3
Author: MTRNord <mtrnord1@gmail.com>
Date:   Sat, 26 Aug 2023 17:58:07 +0200

Add policy

Diffstat:
M
nixos/worker-1/configuration.nix
 | 
56
++++++++++++++++++++++++++++++++++++++++++++++++++++++++

1 file changed, 56 insertions(+), 0 deletions(-)
diff --git a/nixos/worker-1/configuration.nix b/nixos/worker-1/configuration.nix
@@ -486,6 +486,39 @@
         #     };
         #   }
         # ];
+        defined-sets = {
+          prefix-sets = [
+            { }
+            {
+              prefix-set-name = "ps2";
+              prefix-list = [
+                { }
+                {
+                  ip-prefix = "10.0.0.0/10";
+                }
+              ];
+            }
+          ];
+        };
+        policy-definitons = [
+          { }
+          {
+            name = "pd2";
+            statements = [
+              { }
+              {
+                name = "statement1";
+                conditions.match-prefix-set = {
+                  prefix-set = "ps2";
+                  match-set-options = "any";
+                };
+                actions = {
+                  route-disposition = "reject-route";
+                };
+              }
+            ];
+          }
+        ];
         neighbors = [
           { }
           {
@@ -493,6 +526,29 @@
               neighbor-address = "100.64.0.3";
               peer-as = 4242423595;
             };
+            route-server = {
+              config = {
+                route-server-client = true;
+              };
+            };
+            apply-policy = {
+              config = {
+                import-policy-list = [ "pd2" ];
+              };
+            };
+            afis-safis = [
+              {
+                config = {
+                  afis-safe-name = "l3vpn-ipv4-flowspec";
+                };
+              }
+
+              {
+                config = {
+                  afis-safe-name = "l3vpn-ipv6-flowspec";
+                };
+              }
+            ];
           }
         ];
       };