Initial commit

package/network/services/omcproxy/Makefile

@@ -0,0 +1,46 @@
+#
+# Copyright (C) 2015 OpenWrt.org
+#
+# This is free software, licensed under the GNU General Public License v2.
+# See /LICENSE for more information.
+#
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=omcproxy
+PKG_RELEASE:=9
+
+PKG_SOURCE_PROTO:=git
+PKG_SOURCE_URL=$(PROJECT_GIT)/project/omcproxy.git
+PKG_MIRROR_HASH:=61f03d76b14149e417360b6aaa630e920b75a31a6a497353b7160b3a374b20b2
+PKG_SOURCE_DATE:=2021-11-04
+PKG_SOURCE_VERSION:=bfba2aa75802ff1a70ef2fd3eba53409a8c6e93a
+PKG_MAINTAINER:=Steven Barth <cyrus@openwrt.org>
+PKG_LICENSE:=Apache-2.0
+
+include $(INCLUDE_DIR)/package.mk
+include $(INCLUDE_DIR)/cmake.mk
+
+define Package/omcproxy
+  SECTION:=net
+  CATEGORY:=Network
+  DEPENDS:=+libubox +libubus
+  TITLE:=IGMPv3 and MLDv2 Multicast Proxy
+endef
+
+define Package/omcproxy/conffiles
+/etc/config/omcproxy
+endef
+
+CMAKE_OPTIONS += -DWITH_LIBUBOX=1
+
+define Package/omcproxy/install
+	$(INSTALL_DIR) $(1)/etc/config
+	$(INSTALL_CONF) ./files/omcproxy.config $(1)/etc/config/omcproxy
+	$(INSTALL_DIR) $(1)/etc/init.d
+	$(INSTALL_BIN) ./files/omcproxy.init $(1)/etc/init.d/omcproxy
+	$(INSTALL_DIR) $(1)/usr/sbin
+	$(INSTALL_BIN) $(PKG_BUILD_DIR)/omcproxy $(1)/usr/sbin/
+endef
+
+$(eval $(call BuildPackage,omcproxy))

package/network/services/omcproxy/files/omcproxy.config

@@ -0,0 +1,9 @@
+config proxy
+	option scope global
+	option uplink wan
+	list downlink lan
+
+config proxy
+	option scope global
+	option uplink wan6
+	list downlink lan

package/network/services/omcproxy/files/omcproxy.init

@@ -0,0 +1,166 @@
+#!/bin/sh /etc/rc.common
+# Copyright (C) 2018 OpenWrt.org
+
+START=99
+USE_PROCD=1
+PROG=/usr/sbin/omcproxy
+
+# Uncomment to enable verbosity
+#OPTIONS="-v"
+PROXIES=""
+
+omcproxy_add_proxy() {
+	local proxy scope uplink updevice downlinks
+
+	config_get uplink $1 uplink
+	[ -n "$uplink" ] || return
+
+	network_get_device updevice "$uplink" || {
+		procd_append_param error "$uplink is not up"
+		return;
+	}
+
+	config_get downlinks $1 downlink
+	for downlink in $downlinks; do
+		local device
+
+		network_get_device device "$downlink" || {
+			procd_append_param error "$downlink is not up"
+			continue;
+		}
+
+		proxy="$proxy,$device"
+
+		# Disable in-kernel querier while ours is active, default is 1.
+		[ -f /sys/class/net/$device/bridge/multicast_querier ] && \
+			echo 0 > /sys/class/net/$device/bridge/multicast_querier
+	done
+
+	[ -n "$proxy" ] || return 0
+
+	config_get scope $1 scope
+	[ -n "$scope" ] && proxy="$proxy,scope=$scope"
+
+	PROXIES="$PROXIES $updevice$proxy"
+}
+
+omcproxy_add_network_triggers() {
+	local uplink downlinks
+
+	config_get uplink $1 uplink
+	config_get downlinks $1 downlink
+
+	for link in $uplink $downlinks; do
+		local duplicate=0
+
+		for l in $LINKS; do
+			[ "$l" = "$link" ] && duplicate=1
+		done
+
+		[ "$duplicate" = 0 ] && {
+			LINKS="$LINKS $link"
+			procd_add_interface_trigger "interface.*" $link /etc/init.d/omcproxy restart
+		}
+	done
+}
+
+omcproxy_add_firewall_rules() {
+	local uplink downlinks
+
+	config_get uplink $1 uplink
+	config_get downlinks $1 downlink
+
+	upzone=$(fw3 -q network $uplink 2>/dev/null)
+	[ -n "$upzone" ] || return 0
+
+	json_add_object ""
+	json_add_string type rule
+	json_add_string src "$upzone"
+	json_add_string family ipv4
+	json_add_string proto igmp
+	json_add_string target ACCEPT
+	json_close_object
+
+	json_add_object ""
+	json_add_string type rule
+	json_add_string family ipv6
+	json_add_string src "$upzone"
+	json_add_string proto icmp
+	json_add_string src_ip fe80::/10
+	json_add_array icmp_type
+		json_add_string "" 130/0
+		json_add_string "" 131/0
+		json_add_string "" 132/0
+		json_add_string "" 143/0
+	json_close_array
+	json_add_string target ACCEPT
+	json_close_object
+
+	for downlink in $downlinks; do
+		downzone=$(fw3 -q network $downlink 2>/dev/null)
+		[ -n "$downzone" ] || continue
+
+		json_add_object ""
+		json_add_string type rule
+		json_add_string src "$upzone"
+		json_add_string dest "$downzone"
+		json_add_string family ipv4
+		json_add_string proto udp
+		json_add_string dest_ip "224.0.0.0/4"
+		json_add_string target ACCEPT
+		json_close_object
+
+		json_add_object ""
+		json_add_string type rule
+		json_add_string src "$upzone"
+		json_add_string dest "$downzone"
+		json_add_string family ipv6
+		json_add_string proto udp
+		json_add_string dest_ip "ff00::/8"
+		json_add_string target ACCEPT
+		json_close_object
+	done
+}
+
+service_triggers() {
+	LINKS=""
+
+	procd_add_reload_trigger "omcproxy"
+	config_foreach omcproxy_add_network_triggers proxy
+}
+
+start_service() {
+	. /lib/functions/network.sh
+
+	config_load omcproxy
+
+	config_foreach omcproxy_add_proxy proxy
+	[ -n "$PROXIES" ] || return 0
+
+	procd_open_instance
+	procd_set_param command $PROG
+	[ -n "$OPTIONS" ] && procd_append_param command $OPTIONS
+	procd_append_param command $PROXIES
+	procd_set_param respawn
+
+	procd_open_data
+
+	json_add_array firewall
+	config_foreach omcproxy_add_firewall_rules proxy
+	json_close_array
+
+	procd_close_data
+
+	procd_close_instance
+
+	# Increase maximum IPv4 group memberships per socket, default is 100.
+	echo 128 > /proc/sys/net/ipv4/igmp_max_memberships
+}
+
+service_started() {
+	procd_set_config_changed firewall
+}
+
+stop_service() {
+	procd_set_config_changed firewall
+}