ben/circus-gw
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

manually apply ip forwarding rules

Browse Source 
hours of my life wasted over the stupidest regression ever
This commit is contained in:
Benjamin Wiegand
2025-12-07 13:26:00 -08:00
parent 5fb4550d4f
commit 8df4258896
3 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
daemon/starter-scripts/setup_routes.local.sh
+3
View File
@@ -159,4 +159,7 @@ ip6tables -t nat -A PREROUTING -i circustun -j DNAT --to-destination "$localwan_
echo "setting up routes for gateway management/monitoring"
ip6tables -t nat -A POSTROUTING -o localmon -d "$gateway_monitor_subnet" -j MASQUERADE
# enable IP forwarding
# not done automatically due to what I believe is a regression in debian 13
sysctl -p
daemon/starter-scripts/setup_routes.remote.sh
+3 -1
View File
@@ -116,4 +116,6 @@ echo "adding addresses to gre interface"
ip addr add "$circustun_local_ipv4"/"$circustun_ipv4_pfx" dev circustun
ip -6 addr add "$circustun_local_ipv6"/"$circustun_ipv6_pfx" dev circustun
# enable IP forwarding
# not done automatically due to what I believe is a regression in debian 13
sysctl -p
node/up.sh
+4
View File
@@ -25,3 +25,7 @@ nft add rule ip6 raw postrouting oifname circus-wg ip6 saddr "$CLOWN_V6" notrack
nft add rule ip6 raw prerouting iifname circus-wg ip6 saddr "$EDGE_001_WG_V6" ip6 daddr "$WG_V6" notrack ip6 daddr set "$CLOWN_V6"
nft add rule ip6 raw prerouting iifname localbal ip6 saddr "$CLOWN_V6/128" ip6 daddr "$LOCAL_EDGE_001_V6" notrack ip6 daddr set "$EDGE_001_WG_V6"
# enable IP forwarding
# not done automatically due to what I believe is a regression in debian 13
sysctl -p