public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #27939 from evujumenuk/wireguard-rt_tables

Browse Source 
wireguard: add per-peer routing table option
This commit is contained in:
Franz Pletz 2017-08-11 16:27:07 +02:00 committed by GitHub
commit 61d133c1ee
1 changed files with 15 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
nixos/modules/services/networking/wireguard.nix
View File

@ -79,6 +79,16 @@ let
description = "A list of commands called after shutting down the interface."; description = "A list of commands called after shutting down the interface.";
}; };
table = mkOption {
default = "main";
type = types.str;
description = ''The kernel routing table to add this interface's
associated routes to. Setting this is useful for e.g. policy routing
("ip rule") or virtual routing and forwarding ("ip vrf"). Both numeric
table IDs and table names (/etc/rt_tables) can be used. Defaults to
"main".'';
};
peers = mkOption { peers = mkOption {
default = []; default = [];
description = "Peers linked to the interface."; description = "Peers linked to the interface.";
@ -207,9 +217,11 @@ let
"${ipCommand} link set up dev ${name}" "${ipCommand} link set up dev ${name}"
(map (peer: (map (ip: (map (peer:
"${ipCommand} route replace ${ip} dev ${name}" (map (allowedIP:
) peer.allowedIPs)) values.peers) "${ipCommand} route replace ${allowedIP} dev ${name} table ${values.table}"
) peer.allowedIPs)
) values.peers)
values.postSetup values.postSetup
]); ]);