1
0
Fork 1
mirror of https://github.com/thatmattlove/hyperglass.git synced 2026-04-17 21:38:27 +00:00

Update README.md

This commit is contained in:
Carlos Santos 2025-09-13 03:34:23 -03:00 committed by GitHub
parent 2adfed104c
commit 6f7fa08822
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -34,6 +34,34 @@ cp /opt/hyperglass/.samples/sample_directives_mikrotik /etc/hyperglass/directive
cp /opt/hyperglass/.samples/sample_hyperglass /etc/hyperglass/hyperglass.env
You also need to add your AS prefixes to deny queries if you don't want others to look up your own prefixes from your hyperglass instance.
In the directives file, there is a field that is usually commented out. This configuration is meant for devices like Huawei or MikroTik, but it is currently still using the default option from the directives. From what I've tested, putting the rules in the configuration folder (/etc/hyperglass/...) didn't work. If it works later, we can do everything within the directives file in /etc/hyperglass, but for now, it's okay to use the default.
It's possible to create or use the ENTRYPOINT in the Dockerfile to change this at build time when starting the service, but I don't have time right now to stop and implement this.
The code snippet, originally commented, should be modified to something like this:
# DENY RULE FOR AS PREFIX - IPv4
RuleWithIPv4(
condition="172.16.0.0/22",
ge="22",
le="32",
action="deny",
command="",
),
# DENY RULE FOR AS PREFIX - IPv6
RuleWithIPv6(
condition="fd00:2::/32",
ge="32",
le="128",
action="deny",
command="",
),
"### Optional: Quickstart"
cd /opt/hyperglass