ansible-ffibk/roles/service-bird/templates/bird.conf.j2

#
# {{ ansible_managed }}
#

# Variables
define mwu_address = {{ bgp_ipv4_transfer_net | ipaddr('net') | ipaddr(magic) | ipaddr('address') }};
define mwu_as = {{ as_private_mwu }};
define router_id = {{ bgp_loopback_net | ipaddr('net') | ipaddr(magic) | ipaddr('address') }};

# General
timeformat protocol iso long;
router id router_id;

# Functions
function is_default() {
    return net ~ [
        0.0.0.0/0
    ];
}

function is_freifunk() {
    return net ~ [
        10.0.0.0/8{16,24}
    ];
}

function is_dn42() {
    return net ~ [
        172.20.0.0/14{20,28}
    ];
}

function is_chaosvpn() {
    return net ~ [
        172.31.0.0/16+
    ];
}

function is_mwu_self_nets_loose() {
    return net ~ [
{% for prefix in ffmwu_internal_prefixes %}
        {{ prefix.ipv4 | ipaddr('net') }}+{{ "," if not loop.last else "" }}
{% endfor %}
    ];
}

function is_mwu_self_nets_strict() {
    return net ~ [
{% for prefix in ffmwu_internal_prefixes %}
        {{ prefix.ipv4 | ipaddr('net') }}{{ "," if not loop.last else "" }}
{% endfor %}
    ];
}

function is_mwu_loopback() {
    return net ~ [
        {{ ffmwu_loopback_net_ipv4 }}+
    ];
}

function is_mwu_anycast() {
    return net ~ [
        {{ ffmwu_anycast_ipv4 }}
    ];
}

# Protocols
protocol device {
    scan time 30;
};

protocol direct mwu_subnets {
{% for mesh in meshes %}
    interface "{{ mesh.id }}br";
{% endfor %}
    import where is_mwu_self_nets_loose();
};

protocol direct mwu_loopback {
    interface "loopback";
    import where is_mwu_loopback();
};

{% if ffmwu_server_type == "gateway" %}
protocol direct mwu_anycast {
    interface "anycast";
    import where is_mwu_anycast();
};
{% endif %}

protocol static {
{% for prefix in ffmwu_internal_prefixes %}
    route {{ prefix.ipv4 }} reject;
{% endfor %}
};

protocol kernel kernel_mwu {
    scan time 30;
    import none;
    export filter {
        if is_mwu_anycast() then reject;
        if is_mwu_loopback() then accept;
        reject;
    };
    kernel table ipt_mwu;
};

# Templates
template bgp ibgp_mwu {
    local mwu_address as mwu_as;
    import keep filtered on;
    import filter {
        if is_mwu_anycast() then reject;
        if is_mwu_self_nets_loose() then accept;
        if is_freifunk() then accept;
        if is_chaosvpn() then accept;
        if is_dn42() then accept;
        reject;
    };
    export filter {
        if is_mwu_anycast() then reject;
        if is_mwu_self_nets_loose() then accept;
        if source = RTS_BGP then accept;
        reject;
    };
    direct;
    gateway direct;
};

# Include IPv4 MWU peers
include "mwu_ipv4_peers.con?";
{% if ffmwu_server_type == "gateway" %}

# Include IPv4 ICVPN configuration
include "icvpn_ipv4.con?";

# Include IPv4 FFRL configuration
include "ffrl_ipv4.con?";
{% endif %}