blob: 851535764aef8f5da19d62df86436c76b0af021e (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
|
# SPDX-License-Identifier: AGPL-3.0-or-later
# Copyright (C) 2025-2026 Chester A. Unal <chester.a.unal@arinc9.com>
# Exit if there is no wan firewall zone.
fw_section=$(uci show firewall | grep "name='wan'" | cut -d. -f2)
[ -z "$fw_section" ] && exit
# Get the interface of lan network entry.
lan_network_interface="$(uci -q get network.lan.device)"
# If the lan interface exists, check if it is a bridge.
[ -n "$lan_network_interface" ] && for section in $(uci show network | grep "name='$lan_network_interface'" | cut -d. -f2); do
[ "$(uci -q get network.$section.type)" = bridge ] && lan_section="$section" && break
done
# If the lan interface is a bridge, check if there are any interfaces assigned
# to that bridge.
if [ -n "$lan_section" ] && lan_interfaces="$(uci -q get network.$lan_section.ports)"; then
# Set biggest number interface as lan interface.
lan_network_interface="$(echo $lan_interfaces | tr ' ' '\n' | grep '[0-9]\+$' | sort -V | tail -n1)"
# If there are no interfaces with numbers, use the first interface on
# the list.
[ -z "$lan_network_interface" ] && lan_network_interface="$(echo $lan_interfaces | tr ' ' '\n' | head -n1)"
uci set network.lan.device="$lan_network_interface"
# Remove bridge interface.
uci delete network.$lan_section
fi
# Get the interface of wan network entry.
wan_network_interface="$(uci -q get network.wan.device)"
# If the wan interface exists, check if it is a bridge.
[ -n "$wan_network_interface" ] && for section in $(uci show network | grep "name='$wan_network_interface'" | cut -d. -f2); do
[ "$(uci -q get network.$section.type)" = bridge ] && wan_section="$section" && break
done
# If the wan interface is a bridge, check if there are any interfaces assigned
# to that bridge.
if [ -n "$wan_section" ] && wan_network_interface="$(uci -q get network.$wan_section.ports)"; then
# Remove bridge interface.
uci delete network.$wan_section
fi
# Decide the final wan interfaces. They are all wan and lan interfaces except
# the decided lan interface.
final_wan_interfaces="$wan_network_interface $(echo $lan_interfaces | tr ' ' '\n' | grep -v "^$lan_network_interface$")"
# Exit if there are no suitable wan interfaces.
[ -z "$(echo $final_wan_interfaces)" ] && { uci revert network ; exit 0; }
# Delete existing wan and wan6 networks.
uci -q delete network.wan
uci -q delete network.wan6
uci -q del_list firewall.$fw_section.network='wan'
uci -q del_list firewall.$fw_section.network='wan6'
# Add a wan network entry for every wan interface.
index=1
for dev in $final_wan_interfaces; do
# Only metrics 1 to 8 must be allocated for wan so do not add any more.
[ "$index" -gt 8 ] && break
uci -q delete network.wan$index
uci set network.wan$index=interface
uci set network.wan$index.device="$dev"
uci set network.wan$index.proto='dhcp'
uci set network.wan$index.metric="$index"
# Add every wan network entry to firewall wan zone.
uci add_list firewall.$fw_section.network="wan$index"
index=$((index + 1))
done
# Configure xray.
uci set xray.enabled.enabled='1'
# Add rule to use routing table 1 for transparent proxy traffic.
rule_section=$(uci show network | grep "mark='1'" | cut -d. -f2)
[ -n "$rule_section" ] && uci delete network.$rule_section
uci add network rule >/dev/null
uci set network.@rule[-1].priority='0'
uci set network.@rule[-1].lookup='1'
uci set network.@rule[-1].mark='1'
# Add route to route transparent proxy traffic to the loopback interface.
route_section=$(uci show network | grep "table='1'" | cut -d. -f2)
[ -n "$route_section" ] && uci delete network.$route_section
uci add network route >/dev/null
uci set network.@route[-1].interface='loopback'
uci set network.@route[-1].type='local'
uci set network.@route[-1].target='0.0.0.0/0'
uci set network.@route[-1].table='1'
# Commit changes.
uci commit
# Enable bonding.
bsbf-bonding --enable
echo "Installation successful. Plug in to $(uci get network.lan.device) to access LAN."
lan_ip=$(uci get network.lan.ipaddr)
lan_ip=${lan_ip%% *}
lan_ip=${lan_ip%%/*}
echo "Head to http://$lan_ip/bsbf-client-web to access the BSBF Client Monitor."
echo "Reloading network."
service network reload
exit 0
|
