RouterOS 分流 【ospf-over-wireguard】

mycra***

方案

1. https://github.com/allanchen2019/ospf-over-wireguard

复制代码

1. [admin@MikroTik] > /ip/firewall/export                                            
   
2. # 2023-08-31 01:21:39 by RouterOS 7.11
   
3. # software id =
   
4. #
   
5. /ip firewall address-list
   
6. add address=10.0.0.21-10.0.0.251 list=Proxy
   
7. /ip firewall mangle
   
8. add action=change-mss chain=forward new-mss=clamp-to-pmtu passthrough=yes \
   
9.     protocol=tcp tcp-flags=syn
   
10. /ip firewall nat
    
11. add action=masquerade chain=srcnat
    
12. add action=src-nat chain=srcnat out-interface=wg-dc1 to-addresses=10.88.88.3
    
13. [admin@MikroTik] >

复制代码

1. root@vm828386:~# ip a
   
2. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
   
3.     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
   
4.     inet 127.0.0.1/8 scope host lo
   
5.        valid_lft forever preferred_lft forever
   
6.     inet6 ::1/128 scope host
   
7.        valid_lft forever preferred_lft forever
   
8. 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq state UP group default qlen 1000
   
9.     link/ether 00:16:xx:d0:92:af brd ff:ff:ff:ff:ff:ff
   
10.     altname enp0s3
    
11.     altname ens3
    
12.     inet 82.xxxx/24 brd 82.11xxx.255 scope global eth0
    
13.        valid_lft forever preferred_lft forever
    
14.     inet6 fe80::216:3cff:fed0:92af/64 scope link
    
15.        valid_lft forever preferred_lft forever
    
16. 11: wg0: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1420 qdisc noqueue state UNKNOWN group default qlen 1000
    
17.     link/none
    
18.     inet 10.88.88.1/24 scope global wg0
    
19.        valid_lft forever preferred_lft foreve

复制代码

routes4.conf 文件内容





VPS 防火墙文件





/etc/iptables/rules.v4文件

manto***

nchnroutes 的Makefile 里避开你自己VPS的82.xxx 网段了吗？