diff options
| author | doctorpangloss <2229300+doctorpangloss@users.noreply.github.com> | 2026-04-11 18:24:13 -0700 |
|---|---|---|
| committer | doctorpangloss <2229300+doctorpangloss@users.noreply.github.com> | 2026-05-12 10:57:08 -0700 |
| commit | 2df14cbbc0e4e5e6657bb02938768d48f7294684 (patch) | |
| tree | 114c9553c747fe3b228f9407f7eaa894333b17d9 /interface-definitions | |
| parent | 1dd997d724449e941c6bf42be98529372d9f1530 (diff) | |
| download | vyos-1x-2df14cbbc0e4e5e6657bb02938768d48f7294684.tar.gz vyos-1x-2df14cbbc0e4e5e6657bb02938768d48f7294684.zip | |
wan: T8480: add suppress_prefixlength ip rules for internal routing
WLB per-interface routing tables only contain a default route. When
LAN traffic is fwmarked by WLB nftables rules, ip rule policy routes
it to these tables where internal destinations (BGP, connected, DNAT)
have no matching route and incorrectly exit via WAN.
Add ip rule with table main suppress_prefixlength 0 before each
per-interface table rule. This checks the main routing table first
for specific routes but suppresses the default route, so only
internet-bound traffic falls through to WLB per-interface tables.
Signed-off-by: doctorpangloss <2229300+doctorpangloss@users.noreply.github.com>
Diffstat (limited to 'interface-definitions')
0 files changed, 0 insertions, 0 deletions