From 36f713dff28d357458b787e2f1e00a71da7bd51f Mon Sep 17 00:00:00 2001 From: Trygve Laugstøl Date: Thu, 13 Jun 2024 20:05:39 +0200 Subject: tnet --- tnet/files/knot/bird-tnet.conf | 57 ++++++++++++++++++++++++++++++++++++++++++ tnet/files/knot/bird.conf | 49 ------------------------------------ 2 files changed, 57 insertions(+), 49 deletions(-) create mode 100644 tnet/files/knot/bird-tnet.conf delete mode 100644 tnet/files/knot/bird.conf (limited to 'tnet/files/knot') diff --git a/tnet/files/knot/bird-tnet.conf b/tnet/files/knot/bird-tnet.conf new file mode 100644 index 0000000..32f06cb --- /dev/null +++ b/tnet/files/knot/bird-tnet.conf @@ -0,0 +1,57 @@ +define tnet = fdb1:4242:3538::/48; +define tnet_router = fdb1:4242:3538:ffff::/64; + +function is_tnet() -> bool +{ + return net ~ tnet && ! (net ~ tnet_router); +} + +template bgp tnet_tpl { + local as 4242423538; + neighbor internal; + + direct; + + password "trygvis"; + + ipv6 { + next hop self; + import filter { + if is_tnet() then { + print proto, ": import accept, net=", net, ", from=", from, ", gw=", gw; + accept; + } + print proto, ": import reject, reason=not tnet"; reject; + }; + # newer bird's only + # import keep filtered; + export filter { + if is_tnet() then { + print proto, ": export accept, net=", net, ", from=", from, ", gw=", gw; + accept; + } + print proto, ": export reject, reason=not tnet"; reject; + }; + }; +} + +protocol bgp tnet_hash from tnet_tpl { + neighbor fe80:3b20:4cb0:5315:22a:c7de:a45b:8a7d; + interface "tnet-hash"; + + rr client; +} + +protocol bgp tnet_node1 from tnet_tpl { + neighbor fe80:58eb:3930:1815:2a6d:8918:70c9:96f3; + interface "tnet-node1"; + + rr client; +} + +protocol bgp tnet_node2 from tnet_tpl { + neighbor fe80:9dd8:abac:cf05:aea3:dc03:4c74:32db; + interface "tnet-node2"; + + rr client; +} diff --git a/tnet/files/knot/bird.conf b/tnet/files/knot/bird.conf deleted file mode 100644 index fcecc19..0000000 --- a/tnet/files/knot/bird.conf +++ /dev/null @@ -1,49 +0,0 @@ -template bgp tnet_tpl { - local as 4242423538; - neighbor internal; - - direct; - - password "trygvis"; - - ipv6 { - next hop self; - import filter { - if is_tnet() then { - print proto, ": import accept, net=", net, ", from=", from, ", gw=", gw; - accept; - } - print proto, ": import reject, reason=not tnet"; reject; - }; - # newer bird's only - # import keep filtered; - export filter { - if is_tnet() then { - print proto, ": export accept, net=", net, ", from=", from, ", gw=", gw; - accept; - } - print proto, ": export reject, reason=not tnet"; reject; - }; - }; -} - -protocol bgp tnet_hash from tnet_tpl { - neighbor fe80:3b20:4cb0:5315:22a:c7de:a45b:8a7d; - interface "tnet-hash"; - - rr client; -} - -protocol bgp tnet_node1 from tnet_tpl { - neighbor fe80:58eb:3930:1815:2a6d:8918:70c9:96f3; - interface "tnet-node1"; - - rr client; -} - -protocol bgp tnet_node2 from tnet_tpl { - neighbor fe80:9dd8:abac:cf05:aea3:dc03:4c74:32db; - interface "tnet-node2"; - - rr client; -} -- cgit v1.2.3