summaryrefslogtreecommitdiff
path: root/python
diff options
context:
space:
mode:
authorNataliia Solomko <natalirs1985@gmail.com>2026-05-28 15:12:24 +0300
committerNataliia Solomko <natalirs1985@gmail.com>2026-06-05 11:58:20 +0300
commit9b98679c257a2ae61d11435028160ae85eedcb80 (patch)
treeae56dae7bd57e2ef3acb9ef0bc53daec22c8ecc5 /python
parent1bdf8747c28b4278f6bef9b5d54378795f83b57d (diff)
downloadvyos-1x-9b98679c257a2ae61d11435028160ae85eedcb80.tar.gz
vyos-1x-9b98679c257a2ae61d11435028160ae85eedcb80.zip
vrf: T8936: Specify `pref 1998` when deleting fwmark routing rules on VRF removal
Diffstat (limited to 'python')
-rw-r--r--python/vyos/defaults.py5
1 files changed, 5 insertions, 0 deletions
diff --git a/python/vyos/defaults.py b/python/vyos/defaults.py
index 22aa1f62a..5829b859f 100644
--- a/python/vyos/defaults.py
+++ b/python/vyos/defaults.py
@@ -110,3 +110,8 @@ activation_hint = os.path.join(directories['data'], '.activation_hint')
config_sync_exclusion_list = os.path.join(
directories['data'], 'config-sync-exclude.json'
)
+
+# IP rule priority for WireGuard fwmark-based VRF routing rules.
+# Sits between the l3mdev rule (1000) and the l3mdev unreachable rule (2000),
+# ensuring fwmark-tagged tunnel packets are routed into the correct VRF table.
+wireguard_fwmark_pref = '1998'