Re: Policy routing (fwmark-based) and local traffic...

Mandi! Grant Taylor
  In chel di` si favelave...

> Please provide a high level overview of why you are wanting to use PBR. What

Ok. I manage some gateway that handle two or more connection to ISP; i
balance traffic between routes, and sometimes via policy routing i
'bind' some traffic to some interfaces (forward traffic, so PREROUTING
in mangle).

This time i needed to bind local generated traffic, because one of the
two line use dynamic IP and the service i use need static IP (they have
some ACLs).

Initially i've simply applied the same policy i was used to, but does
not work (clearly, PREROUTING is for forwarded traffic, not or local
generated one! Stupid me! ;).
Then i've tried with OUTPUT, but with the same result.

Now i'm using explicit routing, and clearly works. But i was curious,
so i've posted here.


> If that is the simple case, I'd be tempted to see if the l3-mdev can do what
> you are wanting to do.

Do you mean this?
	https://netdevconf.org/1.2/papers/ahern-what-is-l3mdev-paper.pdf

I've no kernel 4.4, but i'm using load balancing with:
	https://www.tldp.org/HOWTO/Adv-Routing-HOWTO/lartc.rpdb.multiple-links.html

and i suppose is a similar concept...

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''          http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)