mirror of
https://github.com/hackerschoice/segfault.git
synced 2024-07-05 17:41:34 +00:00
102 lines
2.0 KiB
Bash
Executable File
102 lines
2.0 KiB
Bash
Executable File
#! /bin/bash
|
|
|
|
# - Take over 10.11.0.1.
|
|
# - Force default route to NordLynx
|
|
|
|
TOR_GW="172.20.0.111"
|
|
VPN_GW="172.20.0.254"
|
|
|
|
devbyip()
|
|
{
|
|
echo "$(ip addr show | grep -F "inet $1" | head) | awk '{ print $7; }'"
|
|
}
|
|
|
|
# Stop routing via VPN
|
|
vpn_unset()
|
|
{
|
|
ip route del default via "${VPN_GW}"
|
|
}
|
|
|
|
# Start routing via VPN
|
|
vpn_set()
|
|
{
|
|
ip route add default via "${VPN_GW}"
|
|
}
|
|
|
|
tor_unset()
|
|
{
|
|
unset IS_SET_TOR
|
|
ip route del default via "${TOR_GW}"
|
|
}
|
|
|
|
tor_set()
|
|
{
|
|
IS_SET_TOR=1
|
|
ip route add default via "${TOR_GW}"
|
|
}
|
|
|
|
monitor_failover()
|
|
{
|
|
# ts=$(date +%s)
|
|
|
|
while :; do
|
|
if [[ -n $IS_SET_TOR ]]; then
|
|
# HERE: TOR is set
|
|
if [[ -f /sf/run/vpn/vpn_status ]]; then
|
|
# HERE: VPN is back
|
|
echo -e >&2 "$(date) WARN: Switching route to VPN."
|
|
tor_unset
|
|
vpn_set
|
|
fi
|
|
else
|
|
# HERE: TOR is NOT set
|
|
# Run a ping test. On failure
|
|
if [[ ! -f /sf/run/vpn/vpn_status ]]; then
|
|
# HERE: VPN is gone
|
|
echo -e >&2 "$(date) WARN: Switching route to TOR."
|
|
vpn_unset
|
|
tor_set
|
|
fi
|
|
fi
|
|
sleep 5
|
|
done
|
|
}
|
|
|
|
DEV="$(devbyip 10.11.)"
|
|
[[ -z $DEV ]] && { echo -e >&2 "DEV not found. Using DEV=eth1"; DEV="eth1"; }
|
|
|
|
DEV_GW="$(devbyip 172.20.0.)"
|
|
[[ -z $DEV_GW ]] && { echo -e >&2 "DEV not found. Using DEV_GW=eth0"; DEV_GW="eth0"; }
|
|
|
|
[[ -n $SF_DEBUG ]] && {
|
|
ip link show >&2
|
|
ip addr show >&2
|
|
ip route show >&2
|
|
|
|
echo >&2 "DEV=${DEV} DEV_GW=${DEV_GW}"
|
|
}
|
|
|
|
ip route del default && \
|
|
ifconfig "$DEV" 10.11.0.1/16 && \
|
|
# MASQ all traffic because the VPN/TOR systems dont know the route back
|
|
# to sf-guest (10.11.0.0/16).
|
|
iptables -t nat -A POSTROUTING -o "${DEV_GW}" -j MASQUERADE && \
|
|
# TOR traffic (10.111.0.0/16) always goes to TOR (transparent proxy)
|
|
ip route add 10.111.0.0/16 via "${TOR_GW}" && \
|
|
echo -e >&2 "FW: SUCCESS" && \
|
|
|
|
/tc.sh "${DEV_GW}" "${DEV}" && \
|
|
echo -e >&2 "TC: SUCCESS" && \
|
|
|
|
# By default go via TOR until vpn_status exists
|
|
tor_set
|
|
monitor_failover
|
|
# Sleep forever. This allows admin to attach to router
|
|
# and muddle with Traffic Control
|
|
# exec -a "[sf-router] sleep" sleep infinity
|
|
|
|
ip route del default
|
|
echo -e >&2 "FAILED to set routes"
|
|
exit 250
|
|
|