2023-01-23 19:54:21 +08:00
|
|
|
#!/bin/bash
|
2023-01-30 15:50:55 +08:00
|
|
|
lan=docker0
|
|
|
|
wan=wlp5s0
|
2023-01-23 19:54:21 +08:00
|
|
|
|
2023-01-30 15:50:55 +08:00
|
|
|
sudo tc qdisc add dev $lan clsact > /dev/null 2>&1
|
2023-02-07 21:11:12 +08:00
|
|
|
sudo tc qdisc add dev $wan clsact > /dev/null 2>&1
|
2023-01-23 19:54:21 +08:00
|
|
|
|
|
|
|
set -ex
|
|
|
|
|
2023-01-27 02:10:27 +08:00
|
|
|
sudo rm -rf /sys/fs/bpf/tc/globals/*
|
|
|
|
|
2023-02-07 23:49:30 +08:00
|
|
|
# clang -fno-stack-protector -O2 -g -emit-llvm -c control/kern/tproxy.c -o - | llc -march=bpf -mcpu=v3 -mattr=+alu32 -filetype=obj -o foo.o
|
|
|
|
clang -O2 -g -Wall -Werror -c control/kern/tproxy.c -target bpf -D__TARGET_ARCH_x86 -o foo.o
|
2023-01-30 15:50:55 +08:00
|
|
|
sudo tc filter del dev $lan ingress
|
|
|
|
sudo tc filter del dev $lan egress
|
2023-02-07 21:11:12 +08:00
|
|
|
sudo tc filter del dev $wan ingress
|
|
|
|
sudo tc filter del dev $wan egress
|
|
|
|
|
2023-01-30 23:21:00 +08:00
|
|
|
sudo tc filter add dev $lan ingress bpf direct-action obj foo.o sec tc/ingress
|
2023-02-12 21:50:15 +08:00
|
|
|
sudo tc filter add dev $lan egress bpf direct-action obj foo.o sec tc/egress
|
2023-02-13 03:41:59 +08:00
|
|
|
sudo tc filter add dev $wan ingress bpf direct-action obj foo.o sec tc/wan_ingress
|
|
|
|
sudo tc filter add dev $wan egress bpf direct-action obj foo.o sec tc/wan_egress
|
2023-02-11 13:34:12 +08:00
|
|
|
|
|
|
|
sudo tc filter del dev $lan ingress
|
|
|
|
sudo tc filter del dev $lan egress
|
|
|
|
sudo tc filter del dev $wan ingress
|
|
|
|
sudo tc filter del dev $wan egress
|
2023-01-23 19:54:21 +08:00
|
|
|
|
|
|
|
exit 0
|