# cat /etc/udev/rules.d/99-bridge.rules 
ACTION=="add", SUBSYSTEM=="module", KERNEL=="br_netfilter", RUN+="/lib/systemd/systemd-sysctl --prefix=/net/bridge"
# cat /etc/sysctl.d/bridge.conf 
net.bridge.bridge-nf-call-ip6tables = 0
net.bridge.bridge-nf-call-iptables = 0
net.bridge.bridge-nf-call-arptables = 0

    <hostdev mode='subsystem' type='pci' managed='yes'>
      <source>
        <address domain='0x0000' bus='0xXX' slot='0xYY' function='0x0Z'/>
      </source>
    </hostdev>

network:
  version: 2
  ethernets:
    eno2:
      dhcp4: false
      dhcp6: false
  bridges:
    br-eno2:
      interfaces:
        - eno2
      dhcp4: false
      addresses:
        - 192.168.X.YY/24
      nameservers:
        addresses:
          - 192.168.X.ZZ
          - 8.8.8.8
        search:
        - DDDD.com
      routes:
      - to: default
        via: 192.168.X.WW

<network>
  <name>host-bridge-eno2</name>
  <forward mode='bridge'/>
  <bridge name='br-eno2'/>
</network>

#!/bin/bash 
#set -x
# Refer : https://ogugu.hateblo.jp/entry/2017/05/18/131751
#         https://qiita.com/hsrmy_nm7/items/06ef43b09f3cf45c852b
#         https://qiita.com/kakinaguru_zo/items/2764dd8e83e54a6605f2
#
#	  https://qiita.com/nishio-dens/items/4bb28574b7d43fd2b3bf
#
#	  https://blog.ingen084.net/posts/20220926-hikari-cross-network2
#
#
#
# For Port Forwarding
#
#  https://blog.ingen084.net/posts/20220926-hikari-cross-network2

BR='2001:aaaa:bbbb::cccc'
CE='2400:XXXX:YYYY:ZZZZ:AAAA:BBBB:CCCC:DDDD'
IP4='153.ddd.eee.fff'
PSID=30
WAN_DEVICE='ens192'
LAN_DEVICE='ens224'
LOCAL_SOURCE='fd00::/64'
TUNDEV='ip6tnl1'	# 新たに作り出すインターフェース名をは好きなように決める
BK_NUM=63
IP6_MARK='1000'

# For Port Forwarding
FORWARDING_PROTOCOL="udp"
FORWARDING_PROT_NUMBERS="PPP1" # "," list
FORWARDING_DESTINATION="192.168.GGG.DDD"
FORWARDING_DESTINATION_NUMBERS="PPP2"
FORWARDING_LOCAL_NET="192.168.GGG.0/24"

set_tunnel(){
  ip -6 addr add $CE dev $WAN_DEVICE
  ip -6 tunnel add $TUNDEV mode ip4ip6 remote $BR local $CE dev $WAN_DEVICE encaplimit none
  ip link set dev $TUNDEV mtu 1460
  ip link set dev $TUNDEV up

  ip -4 route delete default
  ip -4 route add default dev $TUNDEV
}

set_iptables_ip4_output(){
  iptables -t nat -F

  for rule in $( seq 1 ${BK_NUM} ) ; do
    mark=$(( $rule + 16 ))
    pn=$(( $rule - 1))
    portl=$(( $rule * 1024 + $PSID * 16 ))
    portr=$(( $portl + 15 ))
    iptables -t nat -A PREROUTING -m statistic --mode nth --every $BK_NUM --packet $pn -j MARK --set-mark $mark
    iptables -t nat -A OUTPUT     -m statistic --mode nth --every $BK_NUM --packet $pn -j MARK --set-mark $mark
    iptables -t nat -A POSTROUTING -p icmp -o $TUNDEV -m mark --mark $mark -j SNAT --to $IP4:$portl-$portr
    iptables -t nat -A POSTROUTING -p tcp  -o $TUNDEV -m mark --mark $mark -j SNAT --to $IP4:$portl-$portr
    iptables -t nat -A POSTROUTING -p udp  -o $TUNDEV -m mark --mark $mark -j SNAT --to $IP4:$portl-$portr
  done

  iptables -t mangle -o $TUNDEV --insert FORWARD 1 -p tcp --tcp-flags SYN,RST SYN -m tcpmss --mss 1400:65495 -j TCPMSS --clamp-mss-to-pmtu

}


set_iptables_ip6_output(){
    ip6tables -F

    # すべての通信を素通りだと怖いので MARKをつけてLAN内のものからのみ許可する
    ip6tables -t nat -A PREROUTING -i $LAN_DEVICE -j MARK --set-mark $IP6_MARK
    ip6tables -t filter -A FORWARD -p tcp -m mark --mark $IP6_MARK -j ACCEPT
    ip6tables -t filter -A FORWARD -p udp -m mark --mark $IP6_MARK -j ACCEPT
    ip6tables -t filter -A FORWARD -m mark --mark $IP6_MARK -j ACCEPT

    # SSHはローカルネットワークからのみ許可
    ip6tables -A INPUT -p tcp -s $LOCAL_SOURCE --dport 22 -j ACCEPT
    ip6tables -A INPUT -p tcp --dport 22 -j DROP

    # fd00::/64 宛の通信は全部WANに流す
    ip6tables -t nat -A POSTROUTING -s $LOCAL_SOURCE -o $WAN_DEVICE -j MASQUERADE
}

# ポート解放
# Local とInternet から 
# IP Address $IP Port $FORWARDING_PROT_NUMBERS 当てのパケットを 
#$FORWARDING_DESTINATION　に転送

set_iptables_input(){
    iptables -t nat -I PREROUTING -d $IP4 -p $FORWARDING_PROTOCOL -m multiport --dports $FORWARDING_PROT_NUMBERS -j DNAT --to-destination $FORWARDING_DESTINATION:$FORWARDING_DESTINATION_NUMBERS
    iptables -t nat -A POSTROUTING -o $LAN_DEVICE -s $FORWARDING_LOCAL_NET -d $FORWARDING_DESTINATION -p $FORWARDING_PROTOCOL -m multiport --dports $FORWARDING_DESTINATION_NUMBERS -j SNAT --to-source $IP4
}

set_tunnel
set_iptables_ip4_output
set_iptables_ip6_output

set_iptables_input

net.ipv6.conf.ip6tnl1.accept_ra = 0

https://music.showga.red/raspberry-pi-spotify-connect-speaker/

https://music.showga.red/raspberry-pi-spotify-connect-speaker/

driver          = default
device          = /dev/lirc1

device          = auto
driver          = default

pi@raspi:~$ sudo ir-keytable -s rc1 -p all -t
[sudo] password for pi: 
Protocols changed to lirc rc-5 rc-5-sz jvc sony nec sanyo mce_kbd rc-6 sharp xmp imon 
Testing events. Please, press CTRL-C to abort.
259792.760063: lirc protocol(nec): scancode = 0x19
259792.760091: event type EV_MSC(0x04): scancode = 0x19
259792.760091: event type EV_SYN(0x00).
259794.080062: lirc protocol(nec): scancode = 0x16
259794.080090: event type EV_MSC(0x04): scancode = 0x16
259794.080090: event type EV_SYN(0x00).
259794.140092: lirc protocol(nec): scancode = 0x16 repeat
259794.140114: event type EV_MSC(0x04): scancode = 0x16
259794.140114: event type EV_SYN(0x00).
259794.240090: lirc protocol(nec): scancode = 0x16 repeat
259794.240111: event type EV_MSC(0x04): scancode = 0x16
259794.240111: event type EV_SYN(0x00).
259797.030106: lirc protocol(nec): scancode = 0x5a
259797.030132: event type EV_MSC(0x04): scancode = 0x5a
259797.030132: event type EV_SYN(0x00).
259797.100063: lirc protocol(nec): scancode = 0x5a repeat
259797.100088: event type EV_MSC(0x04): scancode = 0x5a
259797.100088: event type EV_SYN(0x00).
^C
pi@raspi:~$