auto br0
iface br0 inet static
    pre-up ip link add $IFACE type bridge

    post-up /usr/local/sbin/post-up-$IFACE.nft
    post-up ip rule add dev $IFACE table 66
    post-up ip route add {{ subnet }} dev {{ ethx }} table 66

    pre-down ip route del {{ subnet }} dev {{ ethx }} table 66
    pre-down ip rule del dev $IFACE table 66
    pre-down /usr/local/sbin/pre-down-$IFACE.nft

    post-down ip link del dev $IFACE

    bridge_stp off
    bridge_waitport 0
    bridge_fd 0
    bridge_ports none

    address {{ vpn_br0_address }}
    broadcast {{ vpn_br0_broadcast }}
    netmask {{ vpn_br0_netmask }}