968f90611e
feat: Split firmware into Bee (L2 transport) and Bumblebee (L3 gateway) roles
...
Bee (wr3000, ar300m16): minimal batman-adv mesh relay with gw_mode=client,
no yggdrasil/GRE6/VPN/SQM/DoH, Parahub_Free bridged to private network.
Bumblebee (axt1800, mt3000, mt6000, ax6s, ax53u): full stack with
gw_mode=server, yggdrasil overlay, GRE6 tunnel, guest isolation, SQM, DoH.
Build creates /etc/parahub/role marker; heartbeat reports firmware_role
and mesh_ip; Bee uses public URL, Bumblebee tries yggdrasil with fallback.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-05 20:21:06 +00:00
859033635b
feat: local Mullvad WireGuard + policy routing for guest traffic
...
- parahub-mullvad script: setup/status/remove for owner's Mullvad key
- WireGuard packages: kmod-wireguard, wireguard-tools, luci-proto-wireguard
- Policy routing: ip4table='100' + guest subnet rule (fixes guest→VPN flow)
- setup: auto-detects country, registers key, creates WG interface, switches firewall
- remove: reverts to GRE6→VPS gateway
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-02-05 15:42:45 +00:00