28ac3a6997
This commit removes iptables backend support and leaves only the netfilter backend support. This means that: - iptables and nftables firewall based systems (firewall3 and firewall 4) are supported trough the netfilter instance mode - the iptables/xtables mode support is disabled For more information on the modes and how to use the new netfilter instance checkout https://www.jool.mx/en/intro-jool.html This move is made out of the commit upstream that sets firewall4 as the default for new default buils and based on the conversation in #16818 and was decided that the netfilter interface is the priority since iptables support will be dropped in the foreseeable future. While at it update the templates provided. Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
47 lines
1.1 KiB
JSON
47 lines
1.1 KiB
JSON
{
|
|
"comment": "Sample full SIIT configuration.",
|
|
|
|
"instance": "instance name",
|
|
"framework": "netfilter",
|
|
|
|
"global": {
|
|
"comment": "pool6 and the RFC6791v4 pool belong here, ever since Jool 4.",
|
|
"pool6": "64:ff9b::/96",
|
|
"manually-enabled": false,
|
|
"zeroize-traffic-class": true,
|
|
"override-tos": false,
|
|
"tos": 254,
|
|
"mtu-plateaus": [1, 2, 3, 4, 5, 6],
|
|
"amend-udp-checksum-zero": true,
|
|
"eam-hairpin-mode": "simple",
|
|
"randomize-rfc6791-addresses": false,
|
|
"rfc6791v6-prefix": null,
|
|
"rfc6791v4-prefix": null
|
|
},
|
|
|
|
"eamt": [
|
|
{
|
|
"comment": {
|
|
"text": "Here's a compound comment.",
|
|
"more": "Its type is not checked, after all.",
|
|
"date": "2019-01-06",
|
|
"whatever": 1234
|
|
},
|
|
"ipv6 prefix": "2001:db8:1::/128",
|
|
"ipv4 prefix": "192.0.2.0"
|
|
}, {
|
|
"ipv6 prefix": "2001:db8:2::",
|
|
"ipv4 prefix": "192.0.2.1/32"
|
|
}, {
|
|
"ipv6 prefix": "2001:db8:3::/124",
|
|
"ipv4 prefix": "192.0.2.16/28"
|
|
}
|
|
],
|
|
|
|
"comment": "This comment is relevant to denylist4 maybe.",
|
|
"denylist4": [
|
|
"198.51.100.0",
|
|
"198.51.100.2/32",
|
|
"198.51.100.32/27"
|
|
]
|
|
}
|