mirrors/dae
1
0
Fork 0
mirror of https://github.com/daeuniverse/dae.git synced 2025-07-16 10:50:01 +07:00
Code Issues Packages Projects Releases Wiki Activity

fix: ip rule is not added when only binding to wan (#399)

Browse Source
This commit is contained in:
mzz
2024-01-02 20:02:00 +08:00
committed by GitHub
parent 9aa9b69c90
commit d1d0f6d16f
3 changed files with 10 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
control/control_plane.go
View File

@ -194,12 +194,15 @@ func NewControlPlane(
} }
}() }()
/// Bind to links. Binding should be advance of dialerGroups to avoid un-routable old connection. if len(global.LanInterface) > 0 || len(global.WanInterface) > 0 {
// Bind to LAN
if len(global.LanInterface) > 0 {
if err = core.setupRoutingPolicy(); err != nil { if err = core.setupRoutingPolicy(); err != nil {
return nil, err return nil, err
} }
}
/// Bind to links. Binding should be advance of dialerGroups to avoid un-routable old connection.
// Bind to LAN
if len(global.LanInterface) > 0 {
if global.AutoConfigKernelParameter { if global.AutoConfigKernelParameter {
_ = SetIpv4forward("1") _ = SetIpv4forward("1")
} }

2
docs/en/README.md
View File

@ -195,7 +195,7 @@ group {
# See https://github.com/daeuniverse/dae/blob/main/docs/en/configuration/routing.md for full examples. # See https://github.com/daeuniverse/dae/blob/main/docs/en/configuration/routing.md for full examples.
routing { routing {
pname(NetworkManager) -> direct pname(NetworkManager, systemd-resolved, dnsmasq) -> must_direct
dip(224.0.0.0/3, 'ff00::/8') -> direct dip(224.0.0.0/3, 'ff00::/8') -> direct
### Write your rules below. ### Write your rules below.

3
example.dae
View File

@ -202,6 +202,9 @@ routing {
# WAN. # WAN.
pname(NetworkManager) -> direct pname(NetworkManager) -> direct
# Bypass DNS stubs. We want to bypass their DNS requests, thus use 'must'.
pname(systemd-resolved, dnsmasq) -> must_direct
# Put it in the front to prevent broadcast, multicast and other packets that should be sent to the LAN from being # Put it in the front to prevent broadcast, multicast and other packets that should be sent to the LAN from being
# forwarded by the proxy. # forwarded by the proxy.
# "dip" means destination IP. # "dip" means destination IP.