refactor xlab-gateway IPv6: /64 SLAAC, scoped policy routing, no NAT66
- Change LAN prefix from fd99:23eb:1682:fd:df::/80 to fd99:23eb:1682:1::/64
- Switch from DHCPv6 stateful to SLAAC (AdvAutonomous on, AdvManagedFlag off)
- Add RDNSS in radvd pointing to fd99:23eb:1682::1
- Scope policy routing rules to LAN sources only (fixes gateway IPv6 breakage)
- Remove NAT66 masquerade on wg-to-wgnet (10.0.0.1 routes fd99:23eb:1682:1::/64 natively)

Co-Authored-By: Claude Opus 4.6 <[email protected]>
1 parent 60a670c commit 30a833d5e41f63a21ce9fb263a2957230a121dc3
@Dixiao-L Dixiao-L authored 27 days ago
Showing 2 changed files
View
hosts/xlab-gateway/dhcp.nix
View
hosts/xlab-gateway/networking.nix