diff options
| author | Viacheslav Hletenko <v.gletenko@vyos.io> | 2023-03-29 18:32:28 +0000 |
|---|---|---|
| committer | Viacheslav Hletenko <v.gletenko@vyos.io> | 2023-03-29 18:32:28 +0000 |
| commit | 79a30d763ec45a23163ef84f9b45ed7e7dba1d21 (patch) | |
| tree | cefda7c83acc332c0382159127d08499fd82de54 /scripts | |
| parent | 02f9e8fbee873f9ca1111a69761546c758001b24 (diff) | |
| download | vyatta-wanloadbalance-79a30d763ec45a23163ef84f9b45ed7e7dba1d21.tar.gz vyatta-wanloadbalance-79a30d763ec45a23163ef84f9b45ed7e7dba1d21.zip | |
T4173: load-balancing wan replace some iptables-nft rules
There are some incompatibility with current version of
kernel/nftables and work of 'iptables-nft'
It cannot insert/delete new rules via 'iptables-nft'
For example:
table ip nat {
chain VYOS_PRE_SNAT_HOOK {
type nat hook postrouting priority srcnat - 1; policy accept;
counter jump WANLOADBALANCE
}
chain WANLOADBALANCE {
ct mark 0xc9 counter snat to 192.0.2.14
}
}
vyos@r14# sudo iptables-nft -t nat -I VYOS_PRE_SNAT_HOOK 1 -j WANLOADBALANCE
iptables: No chain/target/match by that name.
One mention that I know that it was working in 'VyOS 1.4-rolling-202302010317'
Replace some 'iptables-nft' rules with eq nftables rules to return the basic
ability to load-balance traffic.
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions
