123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118 |
- #!/bin/sh
- # 464xlat.sh - 464xlat CLAT
- #
- # Copyright (c) 2015 Steven Barth <cyrus@openwrt.org>
- #
- # This program is free software; you can redistribute it and/or modify
- # it under the terms of the GNU General Public License version 2
- # as published by the Free Software Foundation
- #
- # This program is distributed in the hope that it will be useful,
- # but WITHOUT ANY WARRANTY; without even the implied warranty of
- # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- # GNU General Public License for more details.
- [ -n "$INCLUDE_ONLY" ] || {
- . /lib/functions.sh
- . /lib/functions/network.sh
- . ../netifd-proto.sh
- init_proto "$@"
- }
- proto_464xlat_setup() {
- local cfg="$1"
- local iface="$2"
- local link="464-$cfg"
- local ip6addr ip6prefix tunlink zone
- json_get_vars ip6addr ip6prefix tunlink zone
- [ "$zone" = "-" ] && zone=""
- ( proto_add_host_dependency "$cfg" "::" "$tunlink" )
- if [ -z "$tunlink" ] && ! network_find_wan6 tunlink; then
- proto_notify_error "$cfg" "NO_WAN_LINK"
- return
- fi
- network_get_device tundev "$tunlink"
- ip6addr=$(464xlatcfg "$link" "$tundev" "$ip6prefix" 192.0.0.1 $ip6addr)
- if [ -z "$ip6addr" ]; then
- proto_notify_error "$cfg" "CLAT_CONFIG_FAILED"
- return
- fi
- ip -6 rule del from all lookup local
- ip -6 rule add from all lookup local pref 1
- ip -6 rule add to $ip6addr lookup prelocal pref 0
- echo "$ip6addr" > /tmp/464-$cfg-anycast
- proto_init_update "$link" 1
- proto_add_ipv4_route "0.0.0.0" 0 "" "" 2048
- proto_add_ipv6_route $ip6addr 128 "" "" "" "" 128
- proto_add_data
- [ -n "$zone" ] && json_add_string zone "$zone"
- json_add_array firewall
- [ -z "$zone" ] && zone=$(fw3 -q network $iface 2>/dev/null)
- json_add_object ""
- json_add_string type nat
- json_add_string target SNAT
- json_add_string family inet
- json_add_string snat_ip 192.0.0.1
- json_close_object
- [ -n "$zone" ] && {
- json_add_object ""
- json_add_string type rule
- json_add_string family inet6
- json_add_string proto all
- json_add_string direction in
- json_add_string dest "$zone"
- json_add_string src "$zone"
- json_add_string src_ip $ip6addr
- json_add_string target ACCEPT
- json_close_object
- }
- json_close_array
- proto_close_data
- proto_send_update "$cfg"
- }
- proto_464xlat_teardown() {
- local cfg="$1"
- local link="464-$cfg"
- [ -f /tmp/464-$cfg-anycast ] || return
- local ip6addr=$(cat /tmp/464-$cfg-anycast)
- 464xlatcfg "$link"
- rm -rf /tmp/464-$cfg-anycast
- [ -n "$ip6addr" ] && ip -6 rule del to $ip6addr lookup prelocal
- if [ -z "$(ls /tmp/464-*-anycast 2>&-)" ]; then
- ip -6 rule del from all lookup local
- ip -6 rule add from all lookup local pref 0
- fi
- # Kill conntracks SNATed to 192.0.0.1
- echo 192.0.0.1 > /proc/net/nf_conntrack
- }
- proto_464xlat_init_config() {
- no_device=1
- available=1
- proto_config_add_string "ip6prefix"
- proto_config_add_string "ip6addr"
- proto_config_add_string "tunlink"
- proto_config_add_string "zone"
- }
- [ -n "$INCLUDE_ONLY" ] || {
- add_protocol 464xlat
- }
|