ansible-ffibk/roles/service-bird/templates/bird6.conf.j2

134 lines
2.7 KiB
Text
Raw Normal View History

2017-09-10 23:56:34 +02:00
#
# {{ ansible_managed }}
#
# Variables
define router_id = {{ bgp_loopback_net | ipaddr('net') | ipaddr(magic) | ipaddr('address') }};
define mwu_address = {{ bgp_ipv6_transfer_net | ipaddr('net') | ipaddr(magic) | ipaddr('address') }};
define mwu_as = {{ as_private_mwu }};
# General
timeformat protocol iso long;
router id router_id;
# Functions
function is_default() {
return net ~ [
::/0
];
}
function is_ula() {
return net ~ [
fc00::/7{48,64}
];
}
function is_mwu_self_nets_loose() {
2017-09-10 23:56:34 +02:00
return net ~ [
{% for prefix in ffmwu_internal_prefixes %}
{{ prefix.ipv6 | ipaddr('net') }}+{{ "," if not loop.last else "" }}
{% endfor %}
];
}
function is_mwu_self_nets_strict() {
return net ~ [
{% for prefix in ffmwu_internal_prefixes %}
{{ prefix.ipv6 | ipaddr('net') }}{{ "," if not loop.last else "" }}
{% endfor %}
];
}
function is_mwu_loopback() {
return net ~ [
{{ ffmwu_loopback_net_ipv6 }}+
];
};
function is_mwu_anycast() {
return net ~ [
{{ ffmwu_anycast_ipv6 }}+
];
};
2017-09-10 23:56:34 +02:00
# Protocols
protocol device {
scan time 30;
};
protocol direct mwu_subnets {
{% for mesh in meshes %}
2017-11-06 21:24:56 +01:00
interface "{{ mesh.id }}br";
2017-09-10 23:56:34 +02:00
{% endfor %}
import where is_mwu_self_nets_loose();
};
protocol direct mwu_loopback {
interface "loopback";
import where is_mwu_loopback();
};
{% if ffmwu_server_type == "gateway" %}
protocol direct mwu_anycast {
interface "anycast";
import where is_mwu_anycast();
};
{% endif %}
protocol static {
{% for prefix in ffmwu_internal_prefixes %}
route {{ prefix.ipv6 }} reject;
{% endfor %}
};
protocol kernel kernel_mwu {
scan time 30;
import none;
export filter {
{% if ffmwu_server_type == "gateway" %}
if is_mwu_anycast() then reject;
{% else %}
if is_mwu_anycast() then accept;
{% endif %}
if is_mwu_loopback() then accept;
reject;
};
kernel table ipt_mwu;
2017-09-10 23:56:34 +02:00
};
# Templates
template bgp ibgp_mwu {
local mwu_address as mwu_as;
import keep filtered on;
import filter {
{% if ffmwu_server_type == "gateway" %}
if is_mwu_anycast() then reject;
{% endif %}
if is_mwu_self_nets_loose() then accept;
if is_ula() then accept;
reject;
};
export filter {
if is_mwu_self_nets_loose() then accept;
if source = RTS_BGP then accept;
reject;
};
2017-09-10 23:56:34 +02:00
direct;
gateway direct;
};
# Include IPv6 MWU peers
include "mwu_ipv6_peers.con?";
{% if ffmwu_server_type == "gateway" %}
2017-09-10 23:56:34 +02:00
# Include IPv6 ICVPN configuration
include "icvpn_ipv6.con?";
# Include IPv6 FFRL configuration
include "ffrl_ipv6.con?";
# Include IPv6 Router Advertisement configuration
include "radv.con?";
{% endif %}