# # {{ ansible_managed }} # # Variables define ffrl_as = {{ as_public_ffrl }}; # Routing Table table ffrl; # Functions function is_ffrl_public_nets() { return net ~ [ {% for prefix in public_gw_prefixes %} {{ prefix.ipv6 }}{48,56}{{ "," if not loop.last else "" }} {% endfor %} ]; } function is_ffrl_tunnel_nets() { return net ~ [ {% for peer_id, peer_value in ffrl_exit_server.items() %} {{ peer_value.tunnel_ipv6_network }}{{ "," if not loop.last else "" }} {% endfor %} ]; } # Filters filter ebgp_ffrl_import_filter { if is_default() then accept; reject; } filter ebgp_ffrl_export_filter { if is_ffrl_public_nets() then accept; reject; } # Protocols protocol static ffrl_public_routes { table ffrl; {% for prefix in public_prefixes %} route {{ prefix.ipv6 }} reject; {% endfor %} {% for prefix in public_gw_prefixes %} route {{ prefix.ipv6 }} reject; {% endfor %} } protocol direct ffrl_tunnels { table ffrl; interface "ffrl-*"; import where is_ffrl_tunnel_nets(); } protocol kernel kernel_ffrl { scan time 30; import none; export filter { if is_default() then accept; reject; }; table ffrl; kernel table ipt_internet; }; # Templates template bgp ffrl_uplink { table ffrl; local as mwu_as; import keep filtered; import filter ebgp_ffrl_import_filter; export filter ebgp_ffrl_export_filter; next hop self; direct; }; # Include FFRL IPv4 peers include "ffrl_ipv6_peers.con?";