mirror of
https://github.com/jmcorgan/fips.git
synced 2026-07-30 19:46:15 +00:00
Origami74andJohnathan Corgan
1e4f375dcc
Add fips-gateway binary to CI artifact and Docker build. Systemd service unit with After=fips.service dependency and security hardening. Debian and AUR package entries. OpenWrt packaging: procd init script managing dnsmasq forwarding, proxy NDP, RA route advertisements for the virtual IP pool, and a global IPv6 prefix on br-lan to work around Android suppressing AAAA queries on ULA-only networks. Sysctl config for IPv6 forwarding. Gateway enabled by default in OpenWrt config. Ethernet transport enabled by default. Default gateway config section (commented out) in common fips.yaml.
9 lines
398 B
Plaintext
9 lines
398 B
Plaintext
# FIPS Gateway: kernel settings for outbound LAN gateway operation.
|
|
#
|
|
# Applied by the fips-gateway init script on start.
|
|
# proxy_ndp lets the gateway answer Neighbor Solicitation for virtual IPs
|
|
# on the LAN interface so clients can resolve their link-layer address.
|
|
# IPv6 forwarding is required for routing LAN traffic through fips0.
|
|
net.ipv6.conf.all.proxy_ndp=1
|
|
net.ipv6.conf.all.forwarding=1
|