1
0

Add IPv4 Tunnel Support

This commit is contained in:
2020-12-16 11:15:59 +01:00
parent 3c2de6bc17
commit 21f2235964
2 changed files with 74 additions and 14 deletions

View File

@@ -34,6 +34,7 @@
networking.wireguard.enable = true;
networking.wireguard.interfaces = {
wg-nonat = {
ips = [ "fe80::1337:1/64" "169.254.137.1/24" ];
peers = [ {
allowedIPs = [ "0.0.0.0/0" "::/0" ];
endpoint = "nonat.net.clerie.de:51337";
@@ -42,7 +43,7 @@
listenPort = 51337;
allowedIPsAsRoutes = false;
privateKeyFile = "/var/src/secrets/wireguard/wg-nonat";
} // (import ../../lib/link-local-wireguard.nix {}).llIPv6 "fe80::1337:1" "fe80::1337:2" "wg-nonat";
};
};
networking.firewall.allowedUDPPorts = [ 51337 ];
@@ -52,15 +53,19 @@
router id ${ (lib.head config.networking.interfaces.lo.ipv4.addresses).address };
ipv6 table ospf6;
ipv4 table ospf4;
protocol direct {
interface "lo";
ipv6 {
table ospf6;
};
interface "lo";
ipv6 {
table ospf6;
};
ipv4 {
table ospf4;
};
}
protocol kernel {
protocol kernel kernel_6 {
ipv6 {
table ospf6;
export filter {
@@ -71,7 +76,18 @@
};
}
protocol ospf v3 {
protocol kernel kernel_4 {
ipv4 {
table ospf4;
export filter {
krt_prefsrc=10.152.102.1;
accept;
};
import none;
};
}
protocol ospf v3 ospf_6 {
ipv6 {
table ospf6;
import all;
@@ -85,6 +101,20 @@
};
}
protocol ospf v3 ospf_4 {
ipv4 {
table ospf4;
import all;
export all;
};
area 0 {
interface "wg-nonat" {
cost 80;
type pointopoint;
};
};
}
protocol device {
scan time 10;
}