Supernode

Supernodes sind Server zu denen jeder Freifunk-Router mit aktiviertem MESH-VPN eine Verbindung per fastd aufbaut. Alle Supernodes sind untereinander per tinc verbunden.

HowTo Supernode

folgt in Kürze

Basis für eine Doku http://pad.freifunk.net/public/Supernode_from_Scratch

Super-Nodes

{{#ask: Hat Zweck::Super-Node |format=table |mainlabel=Seite |? Hat Hostnamen=Hostname |? Hat Domäne=Domäne }}

BIRD

# < /etc/bird.conf
log syslog all;
router id $ROUTERID;

protocol kernel {
        export all;
        import all;
        device routes;
        kernel table 16;
};

protocol device {
        scan time 8;
};

protocol ospf {
        import all;
        export all;
        area 0.0.0.0 {
                interface "bb0" {
                        hello 1;
                        dead 4;
                };
                interface "br0" {
                        stub;
                };
        };
};

BIRD6

# < /etc/bird6.conf
log syslog all;
router id $ROUTERID;

protocol kernel {
        export all;
        import all;
        device routes;
        kernel table 16;
};

protocol device {
        scan time 8;
};

protocol radv {
        interface "br0" {
                default lifetime 30;
                max ra interval 5;
        };
};

protocol ospf {
        area 0.0.0.0 {
                interface "bb0" {
                        hello 1;
                        dead 4;
                };
                interface "br0" {
                        stub;
                };
        };
};

dnsmasq

dhcp-authoritative
dhcp-ignore-names
dhcp-range=$BEGIN,$END,12h
interface=br0
no-resolv
quiet-dhcp
server=8.8.4.4
server=8.8.8.8
server=2001:4860:4860::8888
server=2001:4860:4860::8844

sysctl

sysctl -w net.ipv6.conf.br0.accept_ra=0
sysctl -w net.ipv6.conf.tap0.accept_ra=0
sysctl -w net.ipv6.conf.bat0.accept_ra=0
sysctl -w net.ipv6.conf.all.forwarding=1
sysctl -w net.ipv4.ip_forward=1
sysctl -w net.bridge.bridge-nf-call-arptables=0
sysctl -w net.bridge.bridge-nf-call-ip6tables=0
sysctl -w net.bridge.bridge-nf-call-iptables=0

ebtables

ebtables -A FORWARD -p IPv6 -i bat0 --ip6-proto ipv6-icmp --ip6-icmp-type router-advertisement -j DROP