eba05ae682
Integrate ip rule support for the prelocal routing table lookup in the 464xlat proto shell handler as netifd does not install anymore an ip rule for the prelocal routing table. The prelocal routing table ip rule needs to be installed before the local routing table ip rule so the 464xlat traffic with as destination the IPv6 anycast address is routed to the nat46 module otherwise the traffic will be dropped in the IPv6 local table. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
110 lines
2.7 KiB
Bash
Executable file
110 lines
2.7 KiB
Bash
Executable file
#!/bin/sh
|
|
# 464xlat.sh - 464xlat CLAT
|
|
#
|
|
# Copyright (c) 2015 Steven Barth <cyrus@openwrt.org>
|
|
#
|
|
# This program is free software; you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License version 2
|
|
# as published by the Free Software Foundation
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
|
|
[ -n "$INCLUDE_ONLY" ] || {
|
|
. /lib/functions.sh
|
|
. /lib/functions/network.sh
|
|
. ../netifd-proto.sh
|
|
init_proto "$@"
|
|
}
|
|
|
|
proto_464xlat_setup() {
|
|
local cfg="$1"
|
|
local iface="$2"
|
|
local link="464-$cfg"
|
|
|
|
local ip6addr ip6prefix tunlink zone
|
|
json_get_vars ip6addr ip6prefix tunlink zone
|
|
|
|
[ -z "$zone" ] && zone="wan"
|
|
|
|
( proto_add_host_dependency "$cfg" "::" "$tunlink" )
|
|
|
|
if [ -z "$tunlink" ] && ! network_find_wan6 tunlink; then
|
|
proto_notify_error "$cfg" "NO_WAN_LINK"
|
|
return
|
|
fi
|
|
network_get_device tundev "$tunlink"
|
|
|
|
ip6addr=$(464xlatcfg "$link" "$tundev" "$ip6prefix" 192.0.0.1 $ip6addr)
|
|
if [ -z "$ip6addr" ]; then
|
|
proto_notify_error "$cfg" "CLAT_CONFIG_FAILED"
|
|
return
|
|
fi
|
|
|
|
ip -6 rule del from all lookup local
|
|
ip -6 rule add from all lookup local pref 1
|
|
ip -6 rule add to $ip6addr lookup prelocal pref 0
|
|
echo "$ip6addr" > /tmp/464-$cfg-anycast
|
|
|
|
proto_init_update "$link" 1
|
|
proto_add_ipv4_route "0.0.0.0" 0 "" "" 2048
|
|
proto_add_ipv6_route $ip6addr 128 "" "" "" "" 128
|
|
|
|
proto_add_data
|
|
[ "$zone" != "-" ] && json_add_string zone "$zone"
|
|
|
|
json_add_array firewall
|
|
json_add_object ""
|
|
json_add_string type nat
|
|
json_add_string target SNAT
|
|
json_add_string family inet
|
|
json_add_string snat_ip 192.0.0.1
|
|
json_close_object
|
|
json_add_object ""
|
|
json_add_string type rule
|
|
json_add_string family inet6
|
|
json_add_string proto all
|
|
json_add_string direction in
|
|
json_add_string dest "$zone"
|
|
json_add_string src "$zone"
|
|
json_add_string src_ip $ip6addr
|
|
json_add_string target ACCEPT
|
|
json_close_object
|
|
json_close_array
|
|
proto_close_data
|
|
|
|
proto_send_update "$cfg"
|
|
}
|
|
|
|
proto_464xlat_teardown() {
|
|
local cfg="$1"
|
|
local link="464-$cfg"
|
|
local ip6addr=$(cat /tmp/464-$cfg-anycast)
|
|
local anycast_active
|
|
|
|
464xlatcfg "$link"
|
|
|
|
rm -rf /tmp/464-$cfg-anycast
|
|
ip -6 rule del to $ip6addr lookup prelocal
|
|
|
|
if [ -z "$(ls /tmp/464-*-anycast 2>&-)" ]; then
|
|
ip -6 rule del from all lookup local
|
|
ip -6 rule add from all lookup local pref 0
|
|
fi
|
|
}
|
|
|
|
proto_464xlat_init_config() {
|
|
no_device=1
|
|
available=1
|
|
|
|
proto_config_add_string "ip6prefix"
|
|
proto_config_add_string "ip6addr"
|
|
proto_config_add_string "tunlink"
|
|
proto_config_add_string "zone"
|
|
}
|
|
|
|
[ -n "$INCLUDE_ONLY" ] || {
|
|
add_protocol 464xlat
|
|
}
|