diff options
| author | Nataliia Solomko <natalirs1985@gmail.com> | 2026-05-07 12:18:47 +0300 |
|---|---|---|
| committer | Nataliia Solomko <natalirs1985@gmail.com> | 2026-05-11 14:07:58 +0300 |
| commit | fea16e41f9a3f4aef4251786b7d157e781368cb9 (patch) | |
| tree | d51dd39cd0e33f087ac9be2731973931e200eea4 /interface-definitions/include/generic-interface.xml.i | |
| parent | 7cf4d14610a021d13e1a54df05cf1bffc03f714b (diff) | |
| download | vyos-1x-fea16e41f9a3f4aef4251786b7d157e781368cb9.tar.gz vyos-1x-fea16e41f9a3f4aef4251786b7d157e781368cb9.zip | |
wireguard: T8509: Add fwmark ip rules for VRF-bound interfaces
When a WireGuard interface has both fwmark and VRF configured, outgoing
tunnel packets marked with the fwmark were not routed into the correct
VRF routing table, causing them to hit the l3mdev unreachable rule instead.
Add an ip rule at priority 1998 (after l3mdev at 1000 and before l3mdev
unreachable at 2000) to route fwmark-tagged packets into the correct
VRF routing table.
Diffstat (limited to 'interface-definitions/include/generic-interface.xml.i')
0 files changed, 0 insertions, 0 deletions