kvas2-go

Better implementation of KVAS

Roadmap:

DNS Proxy
DNS Records table
IPTables rules to remap DNS server [1]
Rule composer
List loading/watching (temporary)
IPSet integration
Listing of interfaces
IPTables rules to IPSet [2]
HTTP API
HTTP GUI
Getting readable names of interfaces from Keenetic NDMS
HTTP Auth

[1] Example

KVAS2_NAME=KVAS2
KVAS2_DNS_PORT=7548

# Создание правил
iptables -t nat -N ${KVAS2_NAME}_PREROUTING
iptables -t nat -A ${KVAS2_NAME}_PREROUTING -p udp --dport 53 -j REDIRECT --to-port ${KVAS2_DNS_PORT}

# Применение правил
iptables -t nat -I PREROUTING 1 -j ${KVAS2_NAME}_PREROUTING

# Удаление правил
iptables -t nat -D PREROUTING -j ${KVAS2_NAME}_PREROUTING

[2] Example

IPSET_TABLE=kvas2
MARK=1
TABLE=100
INTERFACE=ovpn_br0
iptables -t mangle -A PREROUTING -m set --match-set $IPSET_TABLE dst -j MARK --set-mark $MARK
ip rule add fwmark $MARK table $TABLE
ip route add default dev $INTERFACE table $TABLE
iptables -t nat -A POSTROUTING -o $INTERFACE -j MASQUERADE

1.1 KiB Raw Blame History

kvas2-go

1.1 KiB

Raw Blame History