As201354: Difference between revisions

Revision as of 21:24, 11 February 2026

Anycast Nodes 2001:67c:8d4::/48
ID	Location	Provider	Public /56 block	Internal /64
0	🇨🇭Zurich	https://www.securebit.ch/	2001:67c:8d4:100::/56	fd00:0:0:1::2/128
1	🇩🇪Düsburg	https://www.securebit.ch/	2001:67c:8d4:200::/56	fd00:0:0:1::3/128

Adding a new Node on master

/ip/firewall/filter add chain=input action=accept protocol=udp dst-port=9999 comment="Allow WG incoming"

/interface wireguard peers add interface=wg-internal \
    public-key="NODE_PUBLIC_KEY" \
    allowed-address=fd00:0:0:1::XXXX/128,2001:67c:8d4:XXXX::/56 \
    persistent-keepalive=25

/ipv6 route add add dst-address=2001:67c:8d4:XXXX::/56 gateway=fd00:0:0:1::X

Adding a new node on node

/interface wireguard add name=wg-internal mtu=1420

/ipv6 address add address=fd00:0:0:1::XXXX/64 interface=wg-internal advertise=no

/interface wireguard peers add interface=wg-internal \
    public-key="MASTER PUBLIC=" \
    endpoint-address=XXXXXXXX \
    endpoint-port=XXXX \
    allowed-address=fd00:0:0:1::XXXX/128,2001:67c:8d4::/48 \
    persistent-keepalive=25

Checking that it works

# on master 

/ping fd00:0:0:X::1 interface=wg-core
/ping 2001:67c:8d4:XXXX::1
# on node

/ping fd00:0:0:1::1 interface=wg-core

@@ Line 10: / Line 10: @@
 |🇨🇭Zurich
 |https://www.securebit.ch/
-|2001:67c:8d4:1::/56
+|2001:67c:8d4:100::/56
-|fd00:0:0:1::1/64
+|fd00:0:0:1::2/128
 |-
 |1
 |🇩🇪Düsburg
 |https://www.securebit.ch/
-|2001:67c:8d4:2::/56
+|2001:67c:8d4:200::/56
-|fd00:0:0:2::1/64
+|fd00:0:0:1::3/128
 |}
-Adding a new Node
+Adding a new Node on master<syntaxhighlight lang="shell" line="1" start="1">/ip/firewall/filter add chain=input action=accept protocol=udp dst-port=9999 comment="Allow WG incoming"
-/interface/wireguard/add name=wg-internal listen-port=XXXX
+/interface wireguard peers add interface=wg-internal \
+    public-key="NODE_PUBLIC_KEY" \
+    allowed-address=fd00:0:0:1::XXXX/128,2001:67c:8d4:XXXX::/56 \
+    persistent-keepalive=25
-/interface/wireguard/peers/add public-key="" interface=wg-internal endpoint-address=XXXX endpoint-port=XXX allowed-address=fd00:0:0:XXXX::/64
+/ipv6 route add add dst-address=2001:67c:8d4:XXXX::/56 gateway=fd00:0:0:1::X</syntaxhighlight>Adding a new node on node<syntaxhighlight lang="shell">
+/interface wireguard add name=wg-internal mtu=1420
+/ipv6 address add address=fd00:0:0:1::XXXX/64 interface=wg-internal advertise=no
+/interface wireguard peers add interface=wg-internal \
+    public-key="MASTER PUBLIC=" \
+    endpoint-address=XXXXXXXX \
+    endpoint-port=XXXX \
+    allowed-address=fd00:0:0:1::XXXX/128,2001:67c:8d4::/48 \
+    persistent-keepalive=25
+</syntaxhighlight>Checking that it works<syntaxhighlight lang="shell">
+# on master
+/ping fd00:0:0:X::1 interface=wg-core
+/ping 2001:67c:8d4:XXXX::1
+# on node
+/ping fd00:0:0:1::1 interface=wg-core
+</syntaxhighlight>