rc/friwall
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

vpn: assign an IPv6 subnet instead of a single address

Browse source 
We are limited by the size of IPv4 pool (/18), so why not give
everyone an IPv4-internetful of IPv6 addresses.
This commit is contained in:
Timotej Lazar 2023-12-12 19:26:55 +01:00
parent 85714f83b9
commit a8abf580f9
2 changed files with 16 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
web/system.py
View file

@ -108,7 +108,7 @@ def save_config():
wireguard = db.read('wireguard')
for ip, key in wireguard.items():
ip4 = [f'{ip}/32']
ip6 = [f'{key["ip6"]}/128'] if key.get('ip6') else None
ip6 = [f'{key["ip6"]}'] if key.get('ip6') else None
for network in user_networks.get(key.get('user', ''), ()):
if group := network_group(network):
ipset_add(ipsets, group, ip4, ip6)