rait

type Instance struct {
	PrivateKey    string `validate:"required,base64"`          // required, the private key of current node
	AddressFamily string `validate:"required,oneof=ip4 ip6"`   // required, [ip4]/ip6, the address family of current node
	SendPort      int    `validate:"required,min=1,max=65535"` // required, the sending (destination) port of wireguard sockets
	BindAddress   string `validate:"omitempty,ip"`             // the local address for wireguard sockets to bind to

	InterfacePrefix   string `validate:"required"`                    // [rait], the common prefix to name the wireguard interfaces
	InterfaceGroup    int    `validate:"min=0,max=2147483647"`        // [54], the ifgroup for the wireguard interfaces
	MTU               int    `validate:"required,min=1280,max=65535"` // [1400], the MTU of the wireguard interfaces
	FwMark            int    `validate:"min=0,max=4294967295"`        // [0x36], the fwmark on packets sent by wireguard sockets
	DynamicListenPort bool   // false, use dynamic listen ports instead of pre-defined ones

	Isolation          string `validate:"required,oneof=netns vrf"` // [netns]/vrf, the isolation method to separate overlay from underlay
	InterfaceNamespace string // the netns or vrf to move wireguard interface into
	TransitNamespace   string // the netns or vrf to create wireguard sockets in

	Peers string // [/etc/rait/peers.conf], the url of the peer list
}

type Peer struct {
	PublicKey     string `validate:"required,base64"`               // required, the public key of the peer
	AddressFamily string `validate:"required,oneof=ip4 ip6"`        // required, [ip4]/ip6, the address family of this node
	Endpoint      string `validate:"omitempty,ip|hostname_rfc1123"` // the endpoint ip address or resolvable hostname
	SendPort      int    `validate:"required,min=1,max=65535"`      // required, the sending port of the peer
}

type RAIT struct {
	Instances []*Instance
}