ansible-crxn-router/roles/fastd/templates/config.j2

mode {{ item.fastd.mode }};

{% for method in item.fastd.methods %}
method "{{ method }}";
{% endfor %}

bind any:{{ item.fastd.port }};

secret "{{ item.fastd.secret }}";

forward no;
{% set mtu = 28 %}
{% if item.fastd.methods[0] == "null@l2tp" %}
{% set mtu = mtu + 8 %}
{% else %}
{% set mtu = mtu + 24 %}
{% endif %}
{% if item.fastd.mode != "tun" %}
{% set mtu = mtu + 14 %}
{% endif %}
{% if item.fastd.remote.type == "ipv6" %}
{% set mtu = mtu + 20 %}
{% endif %}
{% set mtu = 1500 - mtu %}

peer "{{ item.name }}"
{
    remote {{ item.fastd.remote.type }} "{{ item.fastd.remote.host }}" port {{ item.fastd.remote.port }};
{% if item.fastd.remote.public is defined %}
    key "{{ item.fastd.remote.public }}";
{% endif %}
    interface "{{ item.interface }}";
    float {{ item.fastd.remote.float }};
    mtu {{ mtu }};
}

on up "ip link set dev $INTERFACE up";
on down "ip link set dev $INTERFACE down";