!tCyGickeVqkHsYjWnh:nixos.org

NixOS Networking

908 Members
Declaratively manage your switching, routing, wireless, tunneling and more.263 Servers

Load older messages


SenderMessageTime
5 Jun 2025
@emilazy:matrix.orgemilyAIUI the Realtek chip that OpenWrt does can actually be operated by an external CPU15:30:52
@emilazy:matrix.orgemilyas in it can be a SoC with a MIPS processor, but it can also just be a "dumb" switch that you have an ARM chip talking to or something.15:31:05
@emilazy:matrix.orgemilyI believe that nobody has implemented support for that in OpenWrt/mainline, but if there's a MikroTik thing with an AArch64 CPU and that Realtek chip it could be interesting…15:31:29
@tioan:dunwyn.xyz@tioan:dunwyn.xyz left the room.19:01:58
6 Jun 2025
@uep:matrix.orgueprtl8367 seems to be the only realtek one they use recently01:45:32
@uep:matrix.orguepthere are some qualcomm (arm) and mediatek (mmips) ones with soc and small switch on the same chip01:46:23
@uep:matrix.orguepeverything that's a serious switch is marvell01:46:58
@hexa:lossy.networkhexa(within the openwrt ecosystem)01:48:15
@emilazy:matrix.orgemilyhow can I find these things? when I go to https://toh.openwrt.org/?view=network and sort by SFP+s, very little shows up. I've seen that other listings don't have stuff in that field but searching SFP in the net comments also doesn't turn up much13:24:59
@emilazy:matrix.orgemilyI'm interested in everything OpenWrt can run that has more than a handful of 10 Gbit/s SFP+13:25:21
@emilazy:matrix.orgemilyhttps://openwrt.org/docs/techref/hardware/soc/soc.marvell mostly talks about GbE (I guess the page seems fairly old)13:26:09
@emilazy:matrix.orgemilyso far I haven't been able to find clear records of OpenWrt support for anything between the XikeStor with the Realtek chip (8× SFP+) and the Mellanox monsters (a billion × QSFP)13:27:36
@emilazy:matrix.orgemilywhich I'm sure is a failure of my own searching, but you seem to know more about this than me, so… :)13:27:47
@twicetubular:matrix.orgtwiceTubular joined the room.19:13:37
@uep:matrix.orguep Err, I was responding about mikrotik when I said "they", sorry that wasn't clear. 23:41:33
7 Jun 2025
@hexa:lossy.networkhexanetdev 0x19 videos are up https://netdevconf.info/0x19/pages/sessions.html00:20:52
@deeok:matrix.org@deeok:matrix.org changed their display name from deeok to matrixrooms.info mod bot (does NOT read/send messages and/or invites; used for checking reported rooms).22:30:12
8 Jun 2025
@deeok:matrix.org@deeok:matrix.org left the room.00:03:48
@sacrificial-anode:catgirl.cloudsacrificial-anode joined the room.02:17:17
@abrasaxtes:matrix.orgMichael joined the room.15:04:21
@k900:0upti.meK900 @emily did your 320mhz change get merged 17:45:59
@emilazy:matrix.orgemilyno response yet18:59:08
@emilazy:matrix.orgemily it was only for GB though 18:59:14
@emilazy:matrix.orgemilynot sure about kernel list etiquette re: how long to wait before bumping it18:59:26
@k900:0upti.meK900Yeah I was thinking maybe I should send in the RU one but decided I don't actually care enough19:00:04
9 Jun 2025
@ortolanbunting3002:tchncs.deortolanbunting3002

I have the following routes:

default via 192.168.1.1 dev wlan0 proto dhcp src 192.168.1.147 metric 3003
192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.100 dead linkdown
192.168.1.0/24 dev wlan0 proto dhcp scope link src 192.168.1.147 metric 3003

I have the following sysctl settings:

"net.ipv4.conf.all.ignore_routes_with_linkdown" = 1;
"net.ipv4.conf.default.ignore_routes_with_linkdown" = 1;

From the kernel docs: Ignore routes whose link is down when performing a FIB lookup.

% ip r g 192.168.1.1
192.168.1.1 dev wlan0 src 192.168.1.147 uid 1000
    cache
%

eth0 is unplugged. Ping packets to 192.168.1.1 leave and arrive on wlan0 correctly. Despite that, the nixos-fw rpfilter chain drops those packets (checkReversePath = "strict", logReversePathDrops = true).
The relevant reverse path filter rule is fib saddr . mark . iif oif exists accept.

If I remove the routes on eth0, the pings are no longer dropped.

Why does routing work correctly, but the reverse path lookup fails?

12:20:02
@sigmasquadron:matrix.orgSigmaSquadron joined the room.13:06:38
@spaenny:tchncs.deSpaenny changed their display name from Spaenny to Philipp.20:46:47
10 Jun 2025
@rvdp:infosec.exchangeRamses 🇵🇸 I have the stable-privacy addressing method configured for all my networks with networkd, and I recently noticed that for one particular interface, this setting is not being honoured, and the interface still uses eui64. I checked that the right values are actually set in /proc/sys/net/ipv6/conf/<iface>/addr_gen_mode so it seems that networkd is doing what it's supposed to be doing, but the kernel isn't. One characteristic of this particular interface, is that it has a bunch of tagged vlan interfaces stacked on top of it, which is kind of the only thing that makes it stand out from the other interfaces. I was just wondering if anyone has by any change already stumbled upon this behaviour and looked into it? And if others are observing the same behaviour? 11:23:18
@rvdp:infosec.exchangeRamses 🇵🇸Ah, I am talking about the LL addresses specifically here11:26:12

Show newer messages


Back to Room ListRoom Version: 6