55 lines
1.2 KiB
Go
55 lines
1.2 KiB
Go
package wireguard
|
|
|
|
import (
|
|
"fmt"
|
|
"net/netip"
|
|
"strings"
|
|
|
|
"github.com/qdm12/gluetun/internal/netlink"
|
|
)
|
|
|
|
func (w *Wireguard) addRoutes(link netlink.Link, destinations []netip.Prefix,
|
|
firewallMark uint32,
|
|
) (err error) {
|
|
for _, dst := range destinations {
|
|
err = w.addRoute(link, dst, firewallMark)
|
|
if err == nil {
|
|
continue
|
|
}
|
|
|
|
if dst.Addr().Is6() && strings.Contains(err.Error(), "permission denied") {
|
|
w.logger.Errorf("cannot add route for IPv6 due to a permission denial. "+
|
|
"Ignoring and continuing execution; "+
|
|
"Please report to https://github.com/qdm12/gluetun/issues/998 if you find a fix. "+
|
|
"Full error string: %s", err)
|
|
continue
|
|
}
|
|
return fmt.Errorf("adding route for destination %s: %w", dst, err)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (w *Wireguard) addRoute(link netlink.Link, dst netip.Prefix,
|
|
firewallMark uint32,
|
|
) (err error) {
|
|
family := netlink.FamilyV4
|
|
if dst.Addr().Is6() {
|
|
family = netlink.FamilyV6
|
|
}
|
|
route := netlink.Route{
|
|
LinkIndex: link.Index,
|
|
Dst: dst,
|
|
Family: family,
|
|
Table: int(firewallMark),
|
|
}
|
|
|
|
err = w.netlink.RouteAdd(route)
|
|
if err != nil {
|
|
return fmt.Errorf(
|
|
"adding route for link %s, destination %s and table %d: %w",
|
|
link.Name, dst, firewallMark, err)
|
|
}
|
|
|
|
return err
|
|
}
|