genofire
/
jool-clat
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

imrove clat

This commit is contained in:
genofire 2019-11-14 18:48:36 +01:00
parent eca8c51af0
commit 63a8eb2e60
No known key found for this signature in database
GPG Key ID: 9D7D3C6BFF600C6A
2 changed files with 213 additions and 66 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
clat.service Normal file
View File

@ -0,0 +1,19 @@
# clatd service file for systemd
#
# Install it to: /etc/systemd/system/clat.service
# Enable it with: systemctl enable clat.service
# Start it with: systemctl start clat.service
#
[Unit]
Description=464XLAT CLAT daemon
After=network-online.target
[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=/usr/local/bin/clat reload
ExecStop=/usr/local/bin/clat stop
[Install]
WantedBy=multi-user.target

242
clatd.sh
View File

@ -4,87 +4,215 @@ color_default=$(tput setaf 7);
color_config=$(tput setaf 3);
color_error=$(tput setaf 1);
color_log=$(tput setaf 8);
echo "$(figlet jool clat)${color_log}"
echo "${color_log}"
echo ' ___ _ _ _____ '
echo ' / __| | /_\_ _|'
echo '| (__| |__ / _ \| | '
echo ' \___|____/_/ \_\_| '
ip netns pids jool
if [ $? -eq 0 ]; then
echo "${color_error}> already running - teardown ${color_log}"
ip netns del jool
exit 0
####
# FETCH ENVIRONMENT
#
# nat64_prefix:
# - fetch by dns AAAA-entry ipv4only.arpa
# nat64_subnet:
# - /96
# ifname_ex:
# - get by route to "nat64_prefix"
# v4_address:
# - your ipv4 address
# v4_gw:
# - ipv4 address on gateway where routed
# v4_subnet:
# - /30
# - subnet size of clat ipv4 address
# v4_status_ping:
# - 8.8.8.8
# v6_address_clat (not configable):
# - generated by internal link local and routed src
# v6_subnet_clat (should not configured):
# - /64
#
if [ -r /etc/clatd.env ]; then
source /etc/clatd.env;
fi
#
# TODO:
# - get $nat64_subnet by ipv4only.arpa request
# - skip if ipv4 default route exists
# - improve $nat64_gw generation for ipv6 address in namespace
# - improve subnet sizes - hardcoded /64 and /96
# - improve $v6_address_clat generation for ipv6 address in namespace
nat64_subnet="64:ff9b::"
echo "${color_default}detect nat64: ${color_config}$nat64_subnet${color_log}"
nat64_prefix=${nat64_prefix:-"$(dig +short ipv4only.arpa AAAA | sed 's/c000:a[ab]//' | head -1)"}
if [ $? -ne 0 ]; then
echo "${color_error}dns failed: no request to ipv4only.arpa possible${color_log}"
exit 1
fi
if [ "$nat64_prefix" == "" ]; then
echo "${color_error}nat64 prefix/subnet unkown${color_log}"
exit 1
fi
nat64_subnet=${nat64_subnet:-96}
echo "${color_default}nat64 prefix/subnet: ${color_config}$nat64_prefix${color_default}/${color_config}$nat64_subnet${color_log}"
ifname_ex="$(ip r g ${nat64_subnet}0 | grep -Po 'dev \K[0-9a-z]+')"
ifname_ex="$(ip r g ${nat64_prefix}0 | grep -Po 'dev \K[0-9a-z]+')"
echo "${color_default}over interface: ${color_config}$ifname_ex${color_log}"
#
# setup interfaces and namespace
#
echo "${color_default}> setup interfaces and namespace${color_log}"
ip netns add jool
ip link add name clat type veth peer name to_world
ip link set up dev clat
ip link set up dev to_world netns jool
clat_ll=$(ip -6 address show scope link dev clat | grep -Po 'inet6 \K[0-9a-f:]+')
internal_ll=$(ip netns exec jool ip -6 address show scope link dev to_world | grep -Po 'inet6 \K[0-9a-f:]+')
# ipv4
v4_address=${v4_address:-"192.0.0.2"}
v4_gw=${v4_gw:-"192.0.0.1"}
v4_subnet=${v4_subnet:-30}
echo "${color_default}ipv4: ${color_config}$v4_address${color_default}/${color_config}$v4_subnet${color_default} gw: ${color_config}$v4_gw${color_log}"
v4_status_ping=${v4_status_ping:-"8.8.8.8"}
# ipv6 subnet - should not be changed
v6_subnet_clat=${v6_subnet_clat:-64}
#
# setup network in namespace
#
# END
####
echo "${color_default}> setup network in namespace${color_log}"
namespace_setup() {
echo "${color_default}> namespace setup${color_log}"
ip netns add jool
ip link add name clat type veth peer name to_world
ip link set up dev clat
ip link set up dev to_world netns jool
}
nat64_gw="$(ip r g ${nat64_subnet}0 | grep -Po 'src \K[0-9a-f]+:[0-9a-f]+:[0-9a-f]+:[0-9a-f]+:')$(echo $internal_ll | grep -Po 'fe80::\K[0-9a-f:]+')"
namespace_network() {
echo "${color_default}> namespace network${color_log}"
echo "${color_default}generate internal ipv6 address: ${color_config}$nat64_gw${color_log}"
ip netns exec jool ip -6 address add $nat64_gw/64 dev to_world
ip netns exec jool ip -6 route add default via $clat_ll dev to_world
ip netns exec jool ip -4 address add 192.0.0.1/29 dev to_world
clat_ll=$(ip -6 address show scope link dev clat | grep -Po 'inet6 \K[0-9a-f:]+')
internal_ll=$(ip netns exec jool ip -6 address show scope link dev to_world | grep -Po 'inet6 \K[0-9a-f:]+')
v6_address_clat="$(ip r g ${nat64_prefix}0 | grep -Po 'src \K[0-9a-f]+:[0-9a-f]+:[0-9a-f]+:[0-9a-f]+:')$(echo $internal_ll | grep -Po 'fe80::\K[0-9a-f:]+')"
#
# setup jool in namespace
#
echo "${color_default}ipv6 address clat: ${color_config}$v6_address_clat${color_default}/${color_config}$v6_subnet_clat${color_log}"
ip netns exec jool ip -6 address add $v6_address_clat/$v6_subnet_clat dev to_world
ip netns exec jool ip -6 route add default via $clat_ll dev to_world
ip netns exec jool ip -4 address add $v4_gw/$v4_subnet dev to_world
}
echo "${color_default}> setup jool in namespace${color_log}"
ip netns exec jool modprobe jool_siit
if [ $? -ne 0 ]; then
jool_setup() {
echo "${color_default}> setup jool in namespace${color_log}"
if ! ip netns exec jool modprobe jool_siit; then
echo "${color_error}module jool_siit not found${color_log}"
ip netns del jool
exit 1
fi
ip netns exec jool jool_siit instance add --netfilter --pool6 $nat64_subnet/96
ip netns exec jool jool_siit eamt add 192.0.0.2 $nat64_gw
fi
ip netns exec jool jool_siit instance add --netfilter --pool6 $nat64_prefix/$nat64_subnet
ip netns exec jool jool_siit eamt add $v4_address $v6_address_clat
}
route_ipv6 () {
echo "${color_default}> routing ipv6 to namespace${color_log}"
echo 1 > /proc/sys/net/ipv6/conf/$ifname_ex/proxy_ndp
echo 1 tee /proc/sys/net/ipv6/conf/*/forwarding
ip -6 neigh add proxy $v6_address_clat dev $ifname_ex
ip -6 route add $v6_address_clat/128 via $internal_ll dev clat
}
route_ipv4() {
echo "${color_default}> routing ipv4 to namespace${color_log}"
ip -4 address add $v4_address/$v4_subnet dev clat
ip -4 route add default via $v4_gw dev clat
}
start() {
echo "${color_default}clat start${color_log}"
namespace_setup
namespace_network
jool_setup
route_ipv6
route_ipv4
}
#
# routing ipv6 namespace
#
stop() {
echo "${color_default}clat stop${color_log}"
ip netns del jool
}
echo "${color_default}> routing ipv6 to namespace${color_log}"
echo 1 > /proc/sys/net/ipv6/conf/$ifname_ex/proxy_ndp
echo 1 | tee /proc/sys/net/ipv6/conf/*/forwarding
ip -6 neigh add proxy $nat64_gw dev $ifname_ex
ip -6 route add $nat64_gw/96 via $internal_ll dev clat
status () {
echo "${color_default}clat status${color_log}"
if ip netns pids jool; then
echo "${color_default}clat setup: ${color_config} yes"
echo -n "${color_default}ipv6 address clat: ${color_config}"
ip netns exec jool ip -6 a show to_world | grep -Po 'inet6 \K[0-9a-f:]+\/[0-9]+' | head -1
ping -4 -I clat $v4_status_ping -c 1 1> /dev/null
if [ $? -eq 0 ]; then
echo "${color_default}clat ipv4 ping: ${color_config} yes${color_log}"
else
echo "${color_default}clat ipv4 ping: ${color_error} no${color_log}"
exit 1
fi
else
echo "${color_default}clat setup: ${color_error} no${color_log}"
ping -4 $v4_status_ping -c 1 1> /dev/null
if [ $? -eq 0 ]; then
echo "${color_default}ipv4 ping: ${color_config} yes${color_log}"
else
echo "${color_default}ipv4 ping: ${color_error} no${color_log}"
exit 2
fi
exit 1
fi
}
reload() {
if ip netns pids jool; then
echo "${color_default}reload: clat found${color_log}"
stop
sleep 1
echo "------------------------------"
fi
start
}
toggle() {
if ip netns pids jool; then
echo "${color_default}toggle: clat found${color_log}"
stop
else
echo "${color_default}toggle: clat not found${color_log}"
start
fi
}
#
# routing ipv4 to namespace
#
echo "${color_default}> routing ipv4 to namespace${color_log}"
ip -4 address add 192.0.0.2/29 dev clat
ip -4 route add default via 192.0.0.1 dev clat
case "$1" in
start)
echo "------------------------------"
start
;;
stop)
echo "------------------------------"
stop
;;
status)
echo "------------------------------"
status
;;
restart)
echo "------------------------------"
stop
sleep 1
echo "------------------------------"
start
;;
reload)
echo "------------------------------"
reload
;;
help)
echo "------------------------------"
echo "${color_default}Usage: {start|stop|status|reload|restart|toggle}${color_log}"
exit 1
;;
"")
echo "------------------------------"
toggle
;;
esac
exit $?