Merge pull request #90 from artizirk/routeros

Add support for MikroTik RouterOS config generation
naggie · May 25, 2024 · 7e82e29 · 7e82e29
2 parents c7096d1 + a0a7ed2
commit 7e82e29
Show file tree

Hide file tree

Showing 4 changed files with 64 additions and 1 deletion.
diff --git a/README.md b/README.md
@@ -209,13 +209,15 @@ default. It can also generate VyOS/Vyatta configuration for EdgeOS/Unifi devices
 such as the Edgerouter 4 using the
 [wireguard-vyatta](https://github.com/WireGuard/wireguard-vyatta-ubnt) package,
 as well as configuration for [NixOS](https://nixos.org), ready to be added to
-`configuration.nix` environment definition.
+`configuration.nix` environment definition. [MikroTik RouterOS](https://mikrotik.com/software)
+support is also available.
 
 To change the config file format, set the following environment variables:
 
 * `DSNET_OUTPUT=vyatta`
 * `DSNET_OUTPUT=wg-quick`
 * `DSNET_OUTPUT=nixos`
+* `DSNET_OUTPUT=routeros`
 
 Example vyatta output:
 
@@ -263,6 +265,24 @@ Example NixOS output:
       };
     };
 
+Example MikroTik RouterOS output:
+
+    /interface wireguard
+    add name=wg0 private-key="CDWdi0IcMZgla1hCYI41JejjuFaPCle+vPBxvX5OvVE=";
+    /interface list member
+    add interface=wg0 list=LAN
+    /ip address
+    add address=10.55.148.2/22 interface=wg0
+    /ipv6 address
+    add address=fd00:1965:946d:5000:5a88:878d:dc0:c777/64 advertise=no eui-64=no no-dad=no interface=wg0
+    /interface wireguard peers
+    add interface=wg0 \
+        public-key="iE7dleTu34JOCC4A8xdIZcnbNE+aoji8i1JpP+gdt0M=" \
+        preshared-key="Ch0BdZ6Um29D34awlWBSNa+cz1wGOUuHshjYIyqKxGU=" \
+        endpoint-address=198.51.100.73 \
+        endpoint-port=51820 \
+        persistent-keepalive=25s \
+        allowed-address=10.55.148.0/22,fd00:1965:946d:5000::/64,192.168.10.0/24,fe80::1/64
 
 # FAQ
 

diff --git a/lib/generator.go b/lib/generator.go
@@ -15,6 +15,8 @@ func getPeerConfTplString(peerType PeerType) (string, error) {
 		return vyattaPeerConf, nil
 	case NixOS:
 		return nixosPeerConf, nil
+	case RouterOS:
+		return routerosPeerConf, nil
 	default:
 		return "", fmt.Errorf("unrecognized peer type")
 	}
@@ -84,6 +86,8 @@ func AsciiPeerConfig(peer Peer, peerType string, server Server) (*bytes.Buffer,
 		return GetWGPeerTemplate(peer, Vyatta, server)
 	case "nixos":
 		return GetWGPeerTemplate(peer, NixOS, server)
+	case "routeros":
+		return GetWGPeerTemplate(peer, RouterOS, server)
 	default:
 		return nil, errors.New("unrecognised OUTPUT type")
 	}

diff --git a/lib/peer.go b/lib/peer.go
@@ -21,6 +21,9 @@ const (
 	// NixOS is a declartive linux distro
 	// https://nixos.wiki/wiki/Wireguard
 	NixOS
+	// RouterOS is proprietary Linux based OS by MikroTik
+	// https://help.mikrotik.com/docs/display/ROS/WireGuard
+	RouterOS
 )
 
 type Peer struct {

diff --git a/lib/templates.go b/lib/templates.go
@@ -90,3 +90,39 @@ const nixosPeerConf = `networking.wireguard.interfaces = {{ "{" }}
   {{ "};" }}
 {{ "};" }}
 `
+
+const routerosPeerConf = `/interface wireguard
+add name=wg0 private-key="{{ .Peer.PrivateKey.Key }}";
+/interface list member
+add interface=wg0 list=LAN
+/ip address
+{{ if gt (.Server.Network.IPNet.IP | len) 0 -}}
+add address={{ .Peer.IP }}/{{ .CidrSize }} interface=wg0
+{{ end -}}
+/ipv6 address
+{{ if gt (.Server.Network6.IPNet.IP | len) 0 -}}
+add address={{ .Peer.IP6 }}/{{ .CidrSize6 }} advertise=no interface=wg0
+{{ end -}}
+/interface wireguard peers
+{{/* MikroTik RouterOS does not like trailing commas in arrays */ -}}
+{{ $first := true -}}
+add interface=wg0 \
+    public-key="{{ .Server.PrivateKey.PublicKey.Key }}" \
+    preshared-key="{{ .Peer.PresharedKey.Key }}" \
+    endpoint-address={{ .Endpoint }} \
+    endpoint-port={{ .Server.ListenPort }} \
+    persistent-keepalive={{ .Server.PersistentKeepalive }}s \
+    allowed-address=
+        {{- if gt (.Server.Network.IPNet.IP | len) 0 }}
+            {{- if $first}}{{$first = false}}{{else}},{{end}}
+            {{- .Server.Network.IPNet.IP }}/{{ .CidrSize }}
+        {{- end }}
+        {{- if gt (.Server.Network6.IPNet.IP | len) 0 }}
+            {{- if $first}}{{$first = false}}{{else}},{{end}}
+            {{- .Server.Network6.IPNet.IP }}/{{ .CidrSize6 }}
+        {{- end }}
+        {{- range .Server.Networks }}
+            {{- if $first}}{{$first = false}}{{else}},{{end}}
+            {{- . }}
+        {{- end }}
+`