45 lines
1.2 KiB
Go
45 lines
1.2 KiB
Go
// Copyright (c) Tailscale Inc & contributors
|
|
// SPDX-License-Identifier: BSD-3-Clause
|
|
|
|
// Package wgcfg has types and a parser for representing WireGuard config.
|
|
package wgcfg
|
|
|
|
import (
|
|
"net/netip"
|
|
"slices"
|
|
|
|
"github.com/tailscale/wireguard-go/device"
|
|
"tailscale.com/types/key"
|
|
)
|
|
|
|
//go:generate go run tailscale.com/cmd/cloner -type=Config
|
|
|
|
// Config is a WireGuard configuration.
|
|
// It only supports the set of things Tailscale uses.
|
|
//
|
|
// Peers are not part of the config: wireguard-go learns the peer set
|
|
// and each peer's configuration from the live per-peer config source
|
|
// installed via [tailscale.com/wgengine.Engine.SetPeerConfigFunc].
|
|
type Config struct {
|
|
PrivateKey key.NodePrivate
|
|
Addresses []netip.Prefix
|
|
}
|
|
|
|
// PeerConfig is the WireGuard configuration for one peer.
|
|
type PeerConfig struct {
|
|
// AllowedIPs is the set of prefixes the peer may originate traffic from.
|
|
AllowedIPs []netip.Prefix
|
|
|
|
// PresharedKey is the optional WireGuard pre-shared key. The zero value
|
|
// disables the pre-shared-key layer.
|
|
PresharedKey device.NoisePresharedKey
|
|
}
|
|
|
|
func (c *Config) Equal(o *Config) bool {
|
|
if c == nil || o == nil {
|
|
return c == o
|
|
}
|
|
return c.PrivateKey.Equal(o.PrivateKey) &&
|
|
slices.Equal(c.Addresses, o.Addresses)
|
|
}
|