snow/wireguard-tools
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

wg-quick: use src routing for default routes in v6

Browse source 
Otherwise, traffic is sent with the IP address of a different interface,
and then packets don't actually get delivered.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
This commit is contained in:
Jason A. Donenfeld 2017-05-18 14:40:26 +02:00
parent 641b479b44
commit 682b15cb5e
1 changed files with 11 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
src/wg-quick.bash
View file

@ -143,10 +143,18 @@ add_default() {
DEFAULT_TABLE=51820 DEFAULT_TABLE=51820
while [[ -n $(ip route show table $DEFAULT_TABLE) ]]; do ((DEFAULT_TABLE++)); done while [[ -n $(ip route show table $DEFAULT_TABLE) ]]; do ((DEFAULT_TABLE++)); done
fi fi
local proto=-4 local proto=-4 src ip
[[ $1 == *:* ]] && proto=-6 if [[ $1 == *:* ]]; then
proto=-6
for ip in "${ADDRESSES[@]}"; do
if [[ $ip == *:* ]]; then
src="src ${ip%/*}"
break
fi
done
fi
cmd wg set "$INTERFACE" fwmark $DEFAULT_TABLE cmd wg set "$INTERFACE" fwmark $DEFAULT_TABLE
cmd ip $proto route add "$1" dev "$INTERFACE" table $DEFAULT_TABLE cmd ip $proto route add "$1" $src dev "$INTERFACE" table $DEFAULT_TABLE
cmd ip $proto rule add not fwmark $DEFAULT_TABLE table $DEFAULT_TABLE cmd ip $proto rule add not fwmark $DEFAULT_TABLE table $DEFAULT_TABLE
cmd ip $proto rule add table main suppress_prefixlength 0 cmd ip $proto rule add table main suppress_prefixlength 0
local key value local key value