We currently use a number of linux routers, and currently a number of the team tend to jump into servers and change the routing rules when needed, and the auditing is becoming incredibly tedious.
For all other server configs we store in a git repository, and are migrating to using puppet. I haven't been able to figure out how to manage the iproute2 configuration however, as all changes are done live.
This was a similar question for cisco routers: Managing and auditing existing Cisco firewall access control and routing rules I'm wondering if something like this can be done in linux iproute2?