Add VPN gateway to initial split routing configuration

Add the address of the VPN gateway to the initial elements of the nftables set used for split routing excludes. Signed-off-by: hwipl <[email protected]>
telekom-mms · Jan 20, 2025 · 92d6eb9 · 92d6eb9
1 parent 9e6a59a
commit 92d6eb9
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/internal/cmdtmpl/command.go b/internal/cmdtmpl/command.go
@@ -55,12 +55,18 @@ table inet oc-daemon-routing {
 	set excludes4 {
 		type ipv4_addr
 		flags interval
+		{{if .VPNConfig.Gateway.Is4}}
+		elements = { {{.VPNConfig.Gateway}}/32 }
+		{{end}}
 	}
 
 	# set for ipv6 excludes
 	set excludes6 {
 		type ipv6_addr
 		flags interval
+		{{if .VPNConfig.Gateway.Is6}}
+		elements = { {{.VPNConfig.Gateway}}/128 }
+		{{end}}
 	}
 
 	chain preraw {