fastd.conf 1.6 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465
  1. #
  2. # {{ site }} / {{ network }} FASTd configuration (Salt managed)
  3. #
  4. log to syslog level info;
  5. interface "{{ site }}_{{ network }}";
  6. {%- if 'aes' in grains['cpu_flags'] %}
  7. method "aes128-ctr+umac";
  8. {%- else %}
  9. #method "aes128-ctr+umac"; # Not supported by CPU on this machine
  10. {%- endif %}
  11. method "salsa2012+umac";
  12. {#- nodes{4,6} VPNs #}
  13. {%- if network_type == 'nodes' %}
  14. {%- set proto = network.split ('-')[-1] %}
  15. {%- set port = 10000 + site_no|int %}
  16. {%- if network == 'nodes4' %}
  17. bind 0.0.0.0:{{ port }} interface "vrf_external";
  18. {%- else %}
  19. bind [::]:{{ port }} interface "vrf_external";
  20. {%- endif %}
  21. {#- intergw VPN #}
  22. {%- else %}
  23. {%- set port = 11000 + site_no|int %}
  24. bind 0.0.0.0:{{ port }} interface "vrf_external";
  25. bind [::]:{{ port }} interface "vrf_external";
  26. {%- endif %}
  27. # Mark packets to make sure they are associated to VRF vrf_external.
  28. # Specifying the interface and setsockopt() isn't enough for fastd.
  29. packet mark 0x1023;
  30. include "secret.conf";
  31. mtu 1406;
  32. status socket "/var/run/fastd.{{ site }}_{{ network }}.sock";
  33. on up "
  34. ifconfig $INTERFACE down
  35. ip link set address {{ mac_address }} dev $INTERFACE
  36. ifconfig $INTERFACE up
  37. batctl -m {{ bat_iface }} if add $INTERFACE
  38. ";
  39. on down "
  40. batctl -m {{ bat_iface }} if del $INTERFACE
  41. ";
  42. {%- if 'nodes' in network %}
  43. #on establish async "/usr/local/bin/ff_log_vpnpeer establish";
  44. #on disestablish async "/usr/local/bin/ff_log_vpnpeer disestablish";
  45. include peers from "/etc/freifunk/peers";
  46. {%- if peer_limit %}
  47. peer limit {{ peer_limit }};
  48. {%- endif %}
  49. {%- elif 'intergw' in network %}
  50. include peers from "gateways";
  51. {%- endif %}