* a12ba9e modules: Bump packages: Remove all wg-interfaces on autoupdate

This patch was suggested to fix an issue we observe, in which the TX and
RX queues of respondd fill up until it does not respond anymore.
We have observed that setting the device down and up using ubus:

> ubus call network.interface.mesh_radio1 down
> ubus call network.interface.mesh_radio1 up

fixes the issue for us.

Using `iw scan` as suggested in the patch, however, does not help.
We are now adding this patch to observe if it changes the behaviour
of the nodes in our net.

* e215550 Bump community-packages

* 489627b Move our packages to freifunk-gluon/community-packages
* 08ed8ff Add SSH ffbs-debug pubkey
* 8665d81 Drop ssh pubkey for Kasa
* c362e68 Add ffac-weeklyreboot

With this change we hope to solve problems with FritzBox 4040 in our net
randomly having problems accessing their SPI-NORs during runtime or
update.

Note:
Upstreaming in progress:
https://github.com/openwrt/openwrt/pull/15966

Add Mikrotik routerboard-951ui-2nd for Darkbit

darkbit authored 3 years ago and chrissi^ committed 1 month ago

This 8/64 device is supported by OpenWRT. But as it requires opening the case
to access the UART for flashing, it is not eligible to be added to the mainline gluon.

With this change we allow our node operators to publish their contact
details on the status page.

chrissi^ authored 5 years ago and chrissi^ committed 1 month ago

Signed-off-by: Chrissi^ <chris@tinyhost.de>

Emantor authored 9 months ago and chrissi^ committed 3 months ago

For the redirect login implemented for parker, it is beneficial to keep
a list of seen routers and mark them as expired instead of removing them
from the global routers list. This way we don't enter a new redirect
entry for the same router when it shows up again after a mesh link
failure.

All foreach loops should be adjusted to correctly ignore expired
routers.

Signed-off-by: Rouven Czerwinski <rouven@czerwinskis.de>

A popen of `ebtables` can block, when there is already another instance
running.
This timeout was intended to be 1 second.
So we should wait at least that long.

Signed-off-by: Chris Fiege <cfi@pengutronix.de>

Finding the actual IPv4 address of the node relied on "-br" of ip.
Since Gluon v2022 we must live with busybox ip...
This change works around this change...

Jan Luebbe authored 6 years ago and chrissi^ committed 3 months ago

For parker we need DHCP on the client interface. Ths rule
prevents us from doing so.
In addition: make sure old rules will be deleted on upgrade.

Jan Luebbe authored 3 years ago and chrissi^ committed 3 months ago

respondd drops existing json object if any provider returns NULL, so we need to
return an empty object instead.

This change removes the prefix4 and prefix6 attributes from the
site.conf. These do not make sense in the context of parker.

Packages that are usually used in parker do not use these anymore. Some
other packages do - you should not enable those :-)

With this change a ipv6 route to prefix_6 will no longer be set on
br-client. Systems that already have this route will keep it.

With this change the (not working) redirect in the http status page has
been removed. We should consider to add this later on.

Hint: Some changes were moved from this commit to:
community-packages:ffbs-mesh-vpn-parker/files/lib/gluon/upgrade/401-respondd-firewall-parker
This reverts changes done in package/gluon-respondd/luasrc/lib/gluon/upgrade/400-respondd-firewall.

Jan Luebbe authored 4 years ago and chrissi^ committed 3 months ago

Packets which have a destination MAC of other local nodes should not be
redirected, as this possibly results in routing loops in networks with more
than one uplink.

Signed-off-by: Jan Luebbe <sho@stratum0.net>

chrissi^ authored 4 years ago and chrissi^ committed 3 months ago

This change let's uradvd deliver the v6 link-local of this node as DNS.
With this change DNS-requests are not affected by the radv-filterd
-rewrites during roaming.

Signed-off-by: Chrissi^ <chris@tinyhost.de>

Jan Luebbe authored 5 years ago and chrissi^ committed 3 months ago

When multiple routers are in the same local mesh and clients roam from one (A)
to the next (B), the change of global IP and default gateway are not
synchronized. This leads to packets with an address belonging to router A to be
sent via router B (or the other way around). Those packets are then dropped by
wireguard at the concentrator.

To avoid this, we let gluon-radv-filterd monitor router advertisements and keep
a list of neighbouring v6 networks. With this information, it can maintain a
set of ebtables DNAT rules to redirect the packets to the matching gateway.

Signed-off-by: Jan Luebbe <jluebbe@debian.org>

chrissi^ authored 5 years ago and chrissi^ committed 3 months ago

Using this change an VPN-node announces it's own IPv6 as DNS server.
/tmp/addr6 is written by nodeoute.lua during runtime configuration.

Signed-off-by: Chrissi^ <chris@tinyhost.de>

chrissi^ authored 6 years ago and chrissi^ committed 3 months ago

This change alles meshed PARKER-Nodes to forward IPv6 to the next node.

Signed-off-by: Chrissi^ <chris@tinyhost.de>

Jan Luebbe authored 6 years ago and chrissi^ committed 3 months ago

Signed-off-by: Jan Luebbe <jlu@pengutronix.de>

(cherry picked from commit e9acd522455f73f5778a313c73085f4b7c7193cb)

[v2023.2.x] modules: update to latest Git HEAD

c691e6f4c7ea ecdsautils: update to 0.4.2
df37b4e76420 hev-socks5-server: update to 2.6.8
5facb6cbccfb pbr: bugfix for dns & tor policies
340e85698777 rclone: Update to 1.68.1
0e4b82965e03 v2ray-geodata: Update to latest version
f98508023fa4 btop: Update to 1.4.0
e38a6889f4b2 sing-box: Update to 1.9.6
707c578436d0 sing-box: Update to 1.9.5

1efcdb244660 ramips: use OKLI loader for TP-Link RE200 v1 and RE210 v1
fb44dd731484 ramips: introduce TP-Link v1 header OKLI image recipe
1ec1aa9cc729 ramips: add support for netis N6
4d89918a98ae ipq40xx: fix MAC address on Meraki MR33 and MR74 after nvmem-layout
fa0a7e00e829 octeon: ubnt-edgerouter: fix sysupgrade config backup/restore
87477c756e11 tools: bzip2: use static lib and tools