|
|
| Line 2: |
Line 2: |
| |+Anycast Nodes 2001:67c:8d4::/48 | | |+Anycast Nodes 2001:67c:8d4::/48 |
| !ID | | !ID |
| | !Name |
| !Location | | !Location |
| !Provider | | !Provider |
| !Public /56 block
| |
| !Internal /64
| |
| |- | | |- |
| |0 | | |1 |
| | |node1.route.as201354.net |
| |🇨🇭Zurich | | |🇨🇭Zurich |
| |https://www.securebit.ch/ | | |https://www.securebit.ch/ |
| |2001:67c:8d4:100::/56
| |
| |fd00:0:0:1::2/128
| |
| |- | | |- |
| |1 | | |2 |
| | | |
| |🇩🇪Düsburg | | |🇩🇪Düsburg |
| |https://www.securebit.ch/ | | |https://www.securebit.ch/ |
| |2001:67c:8d4:200::/56
| |
| |fd00:0:0:1::3/128
| |
| |} | | |} |
| Adding a new Node on master<syntaxhighlight lang="shell" line="1" start="1">/ip/firewall/filter add chain=input action=accept protocol=udp dst-port=9999 comment="Allow WG incoming"
| |
|
| |
| /interface wireguard peers add interface=wg-internal \
| |
| public-key="NODE_PUBLIC_KEY" \
| |
| allowed-address=fd00:0:0:1::XXXX/128,2001:67c:8d4:XXXX::/56 \
| |
| persistent-keepalive=25
| |
|
| |
| /ipv6 route add dst-address=2001:67c:8d4:XXXX::/56 gateway=fd00:0:0:1::X</syntaxhighlight>Adding a new node on node<syntaxhighlight lang="shell">/ip/firewall/filter add chain=input action=accept protocol=udp dst-port=9999 comment="Allow WG incoming"
| |
|
| |
| /interface wireguard add name=wg-internal mtu=1420 port=9999
| |
|
| |
| /ipv6 address add address=fd00:0:0:1::XXXX/64 interface=wg-internal advertise=no
| |
| /ipv6 address add address=2001:67c:8d4:XXXX::1/56 interface=ether1
| |
|
| |
| /interface wireguard peers add interface=wg-internal \
| |
| public-key="MASTER PUBLIC" \
| |
| endpoint-address=XXXXXXXX \
| |
| endpoint-port=9999 \
| |
| allowed-address=fd00:0:0:1::XXXX/128,2001:67c:8d4::/48 \
| |
| persistent-keepalive=25</syntaxhighlight>Checking that it works<syntaxhighlight lang="shell">
| |
| # on master
| |
|
| |
| /ping fd00:0:0:1::X interface=wg-internal
| |
| /ping 2001:67c:8d4:XXXX::1
| |
| # on node
| |
|
| |
| /ping fd00:0:0:1::1 interface=wg-internal
| |
|
| |
|
| |
| </syntaxhighlight>
| |
