From 78e2117d47eba00b88ce61fc3684fa16b9d09736 Mon Sep 17 00:00:00 2001 From: Jasper Orschulko Date: Thu, 3 Oct 2019 17:07:04 +0200 Subject: [PATCH] added jool config --- Dockerfile | 1 + config.json | 56 +++++++++++++++++++++++++++++++++++++++++++++++++++++ run.sh | 1 + 3 files changed, 58 insertions(+) create mode 100644 config.json diff --git a/Dockerfile b/Dockerfile index 72cf8f8..94d3864 100644 --- a/Dockerfile +++ b/Dockerfile @@ -55,3 +55,4 @@ RUN set -ex \ COPY run.sh /root/run.sh COPY netsocket.json /root/netsocket.json +COPY config.json /root/config.json diff --git a/config.json b/config.json new file mode 100644 index 0000000..67a147d --- /dev/null +++ b/config.json @@ -0,0 +1,56 @@ +{ + "comment": "Freifunk Magdeburg NAT64", + "instance": "default", + "framework": "netfilter", + + "global": { + "pool6": "64:ff9b::/96", + "manually-enabled": true, + + "zeroize-traffic-class": false, + "override-tos": false, + "tos": 0, + "mtu-plateaus": [1280, 1006, 508, 296, 68], + "maximum-simultaneous-opens": 16, + "source-icmpv6-errors-better": true, + "handle-rst-during-fin-rcv": false, + "f-args": 8, + + "logging-bib": false, + "logging-session": false, + + "address-dependent-filtering": true, + "drop-icmpv6-info": false, + "drop-externally-initiated-tcp": false, + + "udp-timeout": "5:00", + "tcp-est-timeout": "4:00:00", + "tcp-trans-timeout": "4:00", + "icmp-timeout": "1:00", + + "ss-enabled": false, + "ss-flush-asap": true, + "ss-flush-deadline": 2000, + "ss-capacity": 512, + "ss-max-payload": 1452 + }, + + "pool4": [ + { + "mark": 66, + "protocol": "TCP", + "prefix": "10.11.12.2", + "port range": "1024-65535" + }, { + "mark": 66, + "protocol": "UDP", + "prefix": "10.11.12.2", + "port range": "1024-65535" + }, { + "mark": 66, + "protocol": "ICMP", + "prefix": "10.11.12.2", + "port range": "61001-65535" + } + ] +} diff --git a/run.sh b/run.sh index f591243..7dca311 100755 --- a/run.sh +++ b/run.sh @@ -7,4 +7,5 @@ done jool --pool6 $V6IP jool --enable +exec jool file handle /root/config.json exec joold /root/netsocket.json