#!/bin/bash
set -euo pipefail

modprobe ip_vti
ip tunnel del vti201 2>/dev/null || true
ip tunnel del vti202 2>/dev/null || true

ip tunnel add vti201 local "${ONPREM_ROUTER_PRIVATE_IP}" remote "${AWS_VPN1_BGP_TUNNEL1_OUTSIDE_IP}" mode vti key 201
ip tunnel add vti202 local "${ONPREM_ROUTER_PRIVATE_IP}" remote "${AWS_VPN1_BGP_TUNNEL2_OUTSIDE_IP}" mode vti key 202
ip address add local "${VPN1_TUNNEL1_CUSTOMER_INSIDE_IP}" peer "${VPN1_TUNNEL1_AWS_INSIDE_IP}/30" dev vti201
ip address add local "${VPN1_TUNNEL2_CUSTOMER_INSIDE_IP}" peer "${VPN1_TUNNEL2_AWS_INSIDE_IP}/30" dev vti202
ip link set vti201 mtu 1399 up
ip link set vti202 mtu 1399 up

for interface in vti201 vti202; do
  sysctl -w "net.ipv4.conf.${interface}.disable_policy=1"
  sysctl -w "net.ipv4.conf.${interface}.rp_filter=0"
done