#!/bin/bash
set -euo pipefail

LOCAL_PRIVATE_IP="${ONPREM_ROUTER_PRIVATE_IP}"
TUNNEL1_PEER="${AWS_VPN1_TUNNEL1_PUBLIC_IP}"
TUNNEL2_PEER="${AWS_VPN1_TUNNEL2_PUBLIC_IP}"

modprobe ip_vti
ip tunnel del vti1 2>/dev/null || true
ip tunnel del vti2 2>/dev/null || true
ip tunnel add vti1 local "$LOCAL_PRIVATE_IP" remote "$TUNNEL1_PEER" mode vti key 101
ip tunnel add vti2 local "$LOCAL_PRIVATE_IP" remote "$TUNNEL2_PEER" mode vti key 102
ip link set vti1 mtu 1436 up
ip link set vti2 mtu 1436 up
sysctl -w net.ipv4.conf.vti1.disable_policy=1
sysctl -w net.ipv4.conf.vti2.disable_policy=1
sysctl -w net.ipv4.conf.vti1.rp_filter=2
sysctl -w net.ipv4.conf.vti2.rp_filter=2
ip route replace 10.1.0.0/16 dev vti1 metric 100