diff options
| author | sarthurdev <965089+sarthurdev@users.noreply.github.com> | 2025-09-10 10:44:15 +0200 |
|---|---|---|
| committer | sarthurdev <965089+sarthurdev@users.noreply.github.com> | 2025-09-10 12:09:09 +0200 |
| commit | ae732fb0eb1dd352ba0b97b07aaf3db9c514ea19 (patch) | |
| tree | cba28059697facdf9d2463d6b970b6d5ec0e73bc /data | |
| parent | 1124d3f9aa0531489bc8f622143afcb6116e8f47 (diff) | |
| download | vyos-1x-ae732fb0eb1dd352ba0b97b07aaf3db9c514ea19.tar.gz vyos-1x-ae732fb0eb1dd352ba0b97b07aaf3db9c514ea19.zip | |
wlb: T114: Add firewall group support for WAN load balancer
Diffstat (limited to 'data')
| -rw-r--r-- | data/config-mode-dependencies/vyos-1x.json | 2 | ||||
| -rw-r--r-- | data/templates/load-balancing/nftables-wlb.j2 | 4 |
2 files changed, 5 insertions, 1 deletions
diff --git a/data/config-mode-dependencies/vyos-1x.json b/data/config-mode-dependencies/vyos-1x.json index ccfc022f4..d186c52bb 100644 --- a/data/config-mode-dependencies/vyos-1x.json +++ b/data/config-mode-dependencies/vyos-1x.json @@ -5,7 +5,7 @@ }, "firewall": { "conntrack": ["system_conntrack"], - "group_resync": ["system_conntrack", "nat", "policy_route"] + "group_resync": ["system_conntrack", "nat", "policy_route", "load-balancing_wan"] }, "interfaces_bonding": { "ethernet": ["interfaces_ethernet"] diff --git a/data/templates/load-balancing/nftables-wlb.j2 b/data/templates/load-balancing/nftables-wlb.j2 index 8afd0c162..6d71676c4 100644 --- a/data/templates/load-balancing/nftables-wlb.j2 +++ b/data/templates/load-balancing/nftables-wlb.j2 @@ -1,5 +1,7 @@ #!/usr/sbin/nft -f +{% import 'firewall/nftables-defines.j2' as group_tmpl %} + {% if first_install is not vyos_defined %} delete table ip vyos_wanloadbalance {% endif %} @@ -61,4 +63,6 @@ table ip vyos_wanloadbalance { meta mark set {{ state.mark }} ct mark set {{ state.mark }} counter accept } {% endfor %} + +{{ group_tmpl.groups(firewall_group, False, True) }} } |