-
Notifications
You must be signed in to change notification settings - Fork 2
/
setup_system.sh
80 lines (75 loc) · 2.59 KB
/
setup_system.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
setup_system_sysctl() {
cat <<EOF >/etc/sysctl.d/999-freifunk.conf
net.ipv4.ip_forward=1
net.ipv6.conf.all.forwarding=1
net.ipv4.conf.default.rp_filter = 0
net.ipv4.conf.all.rp_filter = 0
kernel.panic=3
net.ipv4.conf.default.send_redirects=0
net.ipv4.conf.all.send_redirects=0
net.ipv4.conf.br00.send_redirects=0
net.ipv4.conf.br01.send_redirects=0
net.ipv4.conf.br02.send_redirects=0
net.ipv4.conf.br03.send_redirects=0
net.ipv4.conf.br04.send_redirects=0
net.ipv4.conf.eth0.send_redirects=0
net.ipv4.conf.lo.send_redirects=0
net.ipv4.conf.default.arp_ignore=1
net.ipv4.conf.all.arp_ignore=1
net.ipv4.ip_forward=1
net.ipv4.icmp_echo_ignore_broadcasts=1
net.ipv4.igmp_max_memberships=100
net.ipv4.tcp_ecn=0
net.ipv4.tcp_fin_timeout=30
net.ipv4.tcp_keepalive_time=120
net.ipv4.tcp_syncookies=1
net.ipv4.tcp_timestamps=1
net.ipv4.tcp_sack=1
net.ipv4.tcp_dsack=1
net.ipv6.conf.default.forwarding=1
net.ipv6.conf.all.forwarding=1
net.netfilter.nf_conntrack_acct=1
net.netfilter.nf_conntrack_checksum=0
net.netfilter.nf_conntrack_max=1000000
net.netfilter.nf_conntrack_tcp_timeout_established=7440
net.netfilter.nf_conntrack_udp_timeout=60
net.netfilter.nf_conntrack_udp_timeout_stream=180
# disable bridge firewalling by default
net.bridge.bridge-nf-call-arptables=0
net.bridge.bridge-nf-call-ip6tables=0
net.bridge.bridge-nf-call-iptables=0
net.ipv6.conf.all.accept_ra=0
net.ipv6.conf.default.accept_ra=0
vm.panic_on_oom=1
EOF
sysctl -p /etc/sysctl.d/999-freifunk.conf || true
}
setup_system_sysfs() {
cat <<EOF >/etc/sysfs.d/freifunk.conf
class/net/br00/bridge/hash_max = 4096
class/net/br01/bridge/hash_max = 4096
class/net/br02/bridge/hash_max = 4096
class/net/br03/bridge/hash_max = 4096
class/net/br04/bridge/hash_max = 4096
class/net/batbr00/bridge/hash_max = 4096
class/net/batbr01/bridge/hash_max = 4096
class/net/batbr02/bridge/hash_max = 4096
class/net/batbr03/bridge/hash_max = 4096
class/net/batbr04/bridge/hash_max = 4096
EOF
service sysfsutils restart
}
setup_system_routing() {
ensureline "42 icvpn" /etc/iproute2/rt_tables
ensureline "70 stuttgart" /etc/iproute2/rt_tables
ensureline "71 nodefault" /etc/iproute2/rt_tables
ensureline "1000 othergw" /etc/iproute2/rt_tables
ensureline "2000 direct" /etc/iproute2/rt_tables
}
system_setup_sysfs() {
ensureline "class/net/br00/bridge/hash_max = 4096" /etc/sysfs.d/freifunk
ensureline "class/net/br01/bridge/hash_max = 4096" /etc/sysfs.d/freifunk
ensureline "class/net/br02/bridge/hash_max = 4096" /etc/sysfs.d/freifunk
ensureline "class/net/br03/bridge/hash_max = 4096" /etc/sysfs.d/freifunk
ensureline "class/net/br04/bridge/hash_max = 4096" /etc/sysfs.d/freifunk
}