!tCyGickeVqkHsYjWnh:nixos.org

NixOS Networking

918 Members
Declaratively manage your switching, routing, wireless, tunneling and more.276 Servers

Load older messages


SenderMessageTime
23 Jun 2026
@matthewcroughan:defenestrate.itmatthewcroughan - nix.zonewell you would hope19:14:12
@nico:c3d2.deNicoDid you test it without the bridge?19:14:36
@nico:c3d2.deNicoJust ensure your tunnel actually works19:14:41
@nico:c3d2.deNicogive it static ip addresses on both ends and try to ping through the gre tunnel19:14:57
@nico:c3d2.deNicofrom this point you can continue by adding the bridge on the real host and look at the traffic on the other side19:15:17
@casey:hubns.netcasey ©as far as i knew, once you added an interface to a bridge, the addresses on the interface no longer work.19:15:25
@nico:c3d2.deNicoNot to sure about this, but thats pretty easy to test19:16:10
@nico:c3d2.deNicoNever tested it I think19:16:20
@nico:c3d2.deNicoUsually you don't want to manage the interface in any way if a bridge master has been set19:16:52
@matthewcroughan:defenestrate.itmatthewcroughan - nix.zone So you mean like, just ip link add eogre type ip6gretap local 200:fe12:89ec:86b6:ce32:9e0a:389:44d3 remote 200:25e6:e48d:963:3c5e:6466:87d4:a951 19:16:54
@matthewcroughan:defenestrate.itmatthewcroughan - nix.zonethen bring it up 19:17:05
@matthewcroughan:defenestrate.itmatthewcroughan - nix.zone result of that is 6: eogre@NONE: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 65469 qdisc fq_codel state UNKNOWN group default qlen 1000 link/ether e6:69:2f:e1:80:8d brd ff:ff:ff:ff:ff:ff inet6 fe80::e469:2fff:fee1:808d/64 scope link proto kernel_ll valid_lft forever preferred_lft forever 19:17:31
@matthewcroughan:defenestrate.itmatthewcroughan - nix.zone You want me to add an IP address to that interface eogre@NONE ? 19:18:07
@matthewcroughan:defenestrate.itmatthewcroughan - nix.zoneWhy is it @NONE anyway?19:18:10
@nico:c3d2.deNicoYea, and now do the other site19:18:13
@nico:c3d2.deNicoYou can use fe80::e469:2fff:fee1:808d%eogre from the other side19:18:25
@nico:c3d2.deNico* You should be able to ping fe80::e469:2fff:fee1:808d%eogre from the other side19:18:32
@matthewcroughan:defenestrate.itmatthewcroughan - nix.zoneoh link-local nice19:18:39
@matthewcroughan:defenestrate.itmatthewcroughan - nix.zoneI can, that works19:18:50
@matthewcroughan:defenestrate.itmatthewcroughan - nix.zoneSo is that link-local stuff going over ygg?19:18:58
@matthewcroughan:defenestrate.itmatthewcroughan - nix.zonelooks like it since the response time is 50ms19:19:10
@nico:c3d2.deNicoyea, gre encapsulated. If you don't know how it looks like, I suggest opening wireshark and inspecting the headers19:19:26
@matthewcroughan:defenestrate.itmatthewcroughan - nix.zoneinteresting19:19:50
@matthewcroughan:defenestrate.itmatthewcroughan - nix.zonethe link local ping stops working after adding eth0 and the gre to the bridge19:21:03
@casey:hubns.netcasey ©how about a ping to your default gateway19:21:17
@matthewcroughan:defenestrate.itmatthewcroughan - nix.zonethe v4 default gateway?19:22:16
@casey:hubns.netcasey ©yes.19:22:31
@matthewcroughan:defenestrate.itmatthewcroughan - nix.zoneI mean these are VMs, isn't that supposed to not wor19:22:39
@matthewcroughan:defenestrate.itmatthewcroughan - nix.zone* I mean these are VMs, isn't that supposed to not work?19:22:41
@nico:c3d2.deNicoI assume: Once you create the bridge, eth0 (which is required for tun0 to work properly) is probally going down (because it has now br0 set as master), this way the ygg tunnel can no longer be established which results in the gre no longer working19:22:41

Show newer messages


Back to Room ListRoom Version: 6