Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [policy-routing]

Policy-Based-Routing is a more complex form of the ordinary routing table

0
votes
1answer
22 views

Policy based routing priority behaviour

I have a quick question regarding the behaviour of priority when using policy based routing. I'm running Ubuntu 18.04 (kernel is 4.15.0-1021-aws). I'm using this machine as a gateway to forward ...
0
votes
0answers
142 views

OSPF default route and wireguard

I hava a nice ubnt edgerouter 4. It is running wireguard fine. The tunnel is up. Now I added ospf to the configration. Basicly, it is supposed to get all availible routes by ospf. As well, the ...
0
votes
0answers
136 views

Multiple routes to same subnet

I've successfully configured multiple network interfaces on the same subnet following this guide by RedHat: https://access.redhat.com/solutions/30564 I can ping from any NIC to hosts on the subnet, ...
0
votes
2answers
450 views

Kubernetes Calico: Networking policy to block connecting to the port 10250 on nodes

I have a Kubernetes cluster with Calico network overlay installed in it. How do I configure a network policy object to prevent pods connecting to the port 10250 (kubelet API) on the nodes? I have ...
0
votes
0answers
101 views

ufw conditional interfaces - Dynamic Routing only when an interface has an active connection

I have an interesting setup. Two Wireless Cards and One Ethernet Card all in one box. Sometimes the device is connected to the internet via wired Ethernet interface, and sometimes via Wireless ...
0
votes
1answer
51 views

Routing issues while setting up OpenVPN chaining

I am trying to setup openvpn chaining in the following configuration. Laptop --> server1 --> server2 --> Internet The VPN links individually work between laptop and server1 and server1 and server2. ...
0
votes
2answers
371 views

multiple macvlan devices and policy based routing confusion

I have a server (ubuntu/debian) with two ISP connections. Both of these WAN connections have multiple public IP addresses. (big pipe)----eth0-->\ > server ---eth2--(...
0
votes
2answers
500 views

Does each custom routing table (w/default gateway) need a link scope route?

My Centos machine has a custom routing table foo_table containing just a default gateway route: # ip route add default via 10.0.2.1 table foo_table # ip route show table foo_table default via 10.0....
1
vote
1answer
218 views

linux IPv6 policy based routing fails

I have a VPN server that act as my IPv6 connection to the Internet. The setup us like this: I have been assigned a /48 address pool, that I want to subnet to my VPN clients. For argument sake lets ...
-1
votes
1answer
315 views

Iptables round-robin through multiple virtual network interfaces

I have a server with two main network interfaces and 5 virtual interfaces like this. eth0 - 192.168.1.1 eth1 - 192.168.3.1 eth1:2 192.168.3.3 eth1:3 192.168.3.4 eth1:4 192.168.3.5 eth1:5 192.168.3.6 ...
0
votes
0answers
223 views

Ubuntu 16.10: source based routing: packets are not redirected

I'm trying to configure source based routing on my ubuntu-machine. As simplest example I'm trying to configure the only one interface on my machine. All configuration taken from here: https://www....
1
vote
1answer
497 views

Different gateways for different IPs on same interface on Linux

I have the following question: considering the attached image: I have a server (RHEL 7) with 3 IP addresses (on the same physical interface): 192.168.10.1 (eth0, server address on network 192.168....
4
votes
0answers
158 views

avoid packets being treated as “martians”: is this thinking correct?

I have a cable connection with a Linux-based router. The router has two physical interfaces: enp1s0 (dhcp from cable provider) enp2s0 (192.168.1.1) with masquerading on enp1s0. then, I have an ...
7
votes
1answer
648 views

Multi-homed OpenBSD system: Policy based routing vs. mpath default routes

TL;DR Will OpenBSD policy based routing help with a multi-homed server/gateway situation? If so, how do I configure it? Long Form I'm managing an OpenBSD with two ISP links and VPN tunnels to ...
0
votes
2answers
3k views

Azure how to connect Route-Based VPN with Policy-Based one

I've got Policy-Based VNET that is connected to Cisco ASA - there is no way to make it Route-Based. I need all of my app deployment (Azure Web App, Azure Cloud Services) to be connectable only from ...
-2
votes
1answer
362 views

How to redirect specific outgoing packet from one physical interface to another one in Linux?

In the linux bridge br100 of 1 linux host, vnet0 is the interface connecting 1 internal linux VM. br100 is 1 linux bridge, which has 3 IP addresses: 10.11.13.1/24 is the GW of linux VM (the VM has ...
3
votes
0answers
576 views

policy routing for local outcoming connections

I have a multihomed setup with two upstream providers. And I want to confine some connections to use only one provider — local outgoing connections that is. So, I've made a custom routing table, which ...
0
votes
1answer
680 views

Except some IPs from rule to not allow internet through openwrt + openvpn when vpn is disconnected

I have the following working setup on my network: A. ISP-Router (connected to inet, internal ip 192.168.0.1 ) <----> B. eth0 - OpenWrt Router (OpenVPN client running) br-lan (bridge eth1 + wlan0, ...
-1
votes
1answer
83 views

Problems with routing

I have issue achieving this: A-->B-->C-->internet (doing A--C-->internet is working) A: client lan: 192.168.57.0/24 (example 192.168.57.50) B: ubuntu GW eth0: 172.10.0.1 (/24, default gw:172.10.0....
0
votes
2answers
228 views

Is this the proper way to utilize route-maps for intervlan routing?

screenshot of network map The network is pretty simple. Router-on-a-stick for nat/WAN access, Layer 3 switch for intervlan routing. Router: ip nat inside source list nated-nets interface ...
1
vote
2answers
2k views

PFSENSE: routing packets based on source IP address

I am trying to route packets (actually, trying to change DEFAULT GATEWAY) depending on source IP address with PFSENSE. ONE-SPECIFIC-IP ---> SPECIAL GATEWAY ANY-IP ---> DEFAULT GATEWAY ...
5
votes
1answer
251 views

Overcome asymmetric routing while migrating between sets of ISPs

We are migrating from one set of addresses to another set, both /24, and trying to minimize any down time during the migration. Ideally we'd run both for a period of time as we shut down the old ...
1
vote
0answers
562 views

overlapping subnets - how to give one precedence?

I have Linux devices with a single ethernet interface and two IP adresses. The first (eth0) is statically configured to 10.1.1.146/24. The second (eth0:1) is configured via DHCP and it may happen ...
0
votes
1answer
1k views

Pfsense multi site-to-site wan with policy based routing

We want to create a Hybrid multi WAN site to site connection between two (and more?) remote offices. The office has two WAN connections to the HQ. One MPLS and one ordinary Internet connection. In ...
6
votes
1answer
2k views

How do policy based routing tables actually work?

My understanding of Policy Based Routing in Linux is that there are three main components, the routing tables, the routes and the rules. I've followed many guides and in each of them this seems to be ...
0
votes
1answer
476 views

firewalld: match which zone by policy

I have the following zones that are relevant for this question. SemiTrusted and Public I want to treat IPSEC-encrypted traffic (that is coming from some specific IP addresses) as belonging to ...
0
votes
2answers
586 views

CentOS Multi Nic and Policy Routing?

I'm not familiar with CentOS and I need help doing the routing for this. I have a CentOS box with 3 NICs. eth0 Link encap:Ethernet inet addr:10.50.121.16 Bcast:10.50.121.255 Mask:...
1
vote
0answers
165 views

IP-rules don't seem to be working on CentOS-6.6

I faced a bit odd difficulty with policy-based routing on CentOS-6.6 server. I have a setup where I need to enroute all packets originated from 172.25.0.0/16 destinated to 172.24.0.0/16 and some XXX....
0
votes
1answer
121 views

Change source IP for specific target host

This is a follow up to this question of me. (Still on Debian 7.8) The problem isn't really IPSec related or anything, because I can't even ping the remote host with the "correct" source IP (through ...
2
votes
2answers
829 views

Use OpenVPN tun device for specific request

I have setup an OpenVPN connection with the route-nopull configuration. So now no special routes have been added to the client's configuration and only a TUN device is created, like so: tun0 ...
0
votes
1answer
99 views

Fortinet as intermediate router

I have the next scenario: FG1(LAN A) <--IPSEC--> FG2(LAN B) <--IPSEC--> FG3(LAN C) Basically I need that "LAN A" reach "LAN C" through FG2, I've tried with "router policy" and "router ...
3
votes
1answer
856 views

Change source IP address based on the system user

I would like to make a certain user have a specific source IP address. For this purpose, I added a secondary IP address to the network interface and tried to enforce the source IP using ip6tables and ...
0
votes
1answer
113 views

load balancing multiple connections over multiple links

As I understand it (based on the kernel docs) the setting of "arp_filter=1" necessitates the use of a source based routing policy to allow multiple interfaces to route traffic, potentially (but not ...
1
vote
2answers
739 views

Set default gateway based on protocol using pfSense

I have a pfSense configured with two Internet links for broadband load balancing. One of these links block outgoing traffic on 25 port (WAN1). I have a mail server (IP 10.6.9.2) that should use the ...
0
votes
0answers
845 views

puppetlabs/firewall nat policy issue

I'm using puppetlabs/firewall. I need to create following iptable rules: iptables -A PREROUTING -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 8443 My manifests is firewall { '001 default ...
0
votes
0answers
135 views

Routing traffic from LAN over VPN link out to 'net; works from router, not from LAN. What route is missing?

I have 3 machines. 2, routers, are connected over a VPN. The 3rd is a PC on the lan behind one of the routers. internet | | ROUTER S1 external: YYY.56.52.56 (...
0
votes
1answer
635 views

PBR with iptables

I know question was answered multiple times, but this situation a bit different. So here is what I have: All users must user default gateway on eth0, except one That one must only use gateway on ...
0
votes
0answers
1k views

routing based on source IP

I am trying to do source-based routing, following the question https://unix.stackexchange.com/questions/131527/routing-based-on-source-ip. The source IP floating one and assigned to a cluster (...
1
vote
0answers
193 views

Can I route traffic destined for a local interface out another interface?

I'm trying to set up a testbench for a transparent device (called TD from now on). The goal is to make sure it forwards and logs correctly. I need to use just 1 machine + the TD in the test bench. Yes,...
1
vote
2answers
5k views

Tap0 not receiving traffic

I have created a tap device tap0 address 10.2.1.4 and added it to a host bridge br1 with address 10.2.1.1 I have "nc 10.2.1.4 -l 1234" running on the host and from another machine I do a "nc 10.2.1....
0
votes
1answer
778 views

Cisco IOS policy route for router originated VPN traffic

We have a Cisco IOS router with two DSL connections. One of them is intended for general traffic (ADSL), the other for VPN links (BDSL) and various other traffic. So the default route is the ADSL ...
1
vote
0answers
227 views

Linux as gateway with VLANs failing for local network

We have a private VLAN being routed out from a host connected both to it and to our public network. Hosts on the private VLAN have the private IP address of the gateway host (10.2.2.82) set as their ...
1
vote
0answers
1k views

Using ebtables to drop packets out of bridge and route via Tinc VPN

We have a bridge set up on Ubuntu to link our LAN to our gateway which is on the same subnet. We need this to be able to control the traffic and are not currently in a position to change subnets so we ...
2
votes
2answers
486 views

Simple Policy Based Routing for matching source packet to return packet

I have two ADSL modem-routers and a server all in the same statically-assigned IP address range (192.168.0.1/24). Internet 1 -- (1.1.1.1) Modem 1 (192.168.0.1) -- Switch -- (192.168.0.3) Server ...
1
vote
1answer
854 views

Policy based routing on a bridge interface

I'm currently setting up an Ubuntu 12.04 with 2 net interfaces. eth0 is on LAN_USERS (192.168.5.0/24) intended for user and eth1 is on LAN_INFRA (10.0.4.0) intended for management. Additionally, I've ...
3
votes
1answer
617 views

Packets not entering FORWARD chain

first of all, this is not an every-day routing issue. The setup is fairly complex, so let me state it before. I got a router with, lets keep it simple, 3 interfaces. eth0, eth1, eth2. eth2 is used ...
1
vote
2answers
509 views

OpenVPN Endpoint to endpoint using the real IPs

I want to connect two servers to eachother over the internet. For various reasons I cannot use IPSec for this. I would like traffic to be transparently encrypted as if I was using IPSec transport ...
1
vote
0answers
3k views

How to enable source-based policy routing with pfsense

I'm trying to setup pfsense to use WAN1 for all LAN traffic except when a computer has been added to an alias I labeled "PRIORITY". Those computers use WAN2. On the firewall rules, I set a LAN rule ...
5
votes
2answers
5k views

How can I configure openvpn to proxy traffic only for processes that bind to the tun interface?

I'm trying to configure openvpn so that only traffic from certain processes goes over the vpn, but those processes could connect to anywhere. I'm trying to do that by having openvpn not do any route ...
2
votes
3answers
10k views

Linux policy routing - packets not coming back [closed]

i am trying to set up policy routing on my home server. My network looks like this: Host routed VPN gateway Internet link through VPN 192.168.0.35/24 ---> 192.168.0.5/24 ---&...