Router - Linux upload bonding using policy routing: Difference between revisions

 

Add a script in <tt>/etc/ppp/ip-up.d</tt> and in <tt>/etc/ppp/ipv6-up.d</tt> to put the routes in the per-interface tables:

#!/bin/bash

# ip-up.d/set-routes

 

ip route replace default dev ${PPP_IFACE} table ${PPP_IFACE}

 

#!/bin/bash

# ipv6-up.d/set-routes

 

ip -6 route replace default dev ${PPP_IFACE} table ${PPP_IFACE}

 

Add a script in <tt>/etc/ppp/ip-down.d</tt> and in <tt>/etc/ppp/ipv6-down.d</tt> to remove the per-interface routes when the PPP link goes down:

#!/bin/bash

# ip-down.d/remove-routes

 

ip route flush table ${PPP_IFACE}

 

#!/bin/bash

# ipv6-down.d/remove-routes

 

ip -6 route flush table ${PPP_IFACE}

 

Run the following script on boot:

 

#!/bin/bash

 

ip rule add from all table ppp1 prio 50001

ip -6 rule add from all table ppp1 prio 50001

 

This uses iproute2's ip command to set up policy routing rules; the first set give you a firewall mark per line. (rules at prio 40000 and 40001). The last block (rules at 50000 and 50001) serves two purposes:

# It provides a fallback if you forget to add firewall marks in PREROUTING for some packets.

 

 

for IPT in iptables ip6tables

do

$IPT -A PREROUTING ! -i ppp+ -m statistic --mode nth --every 2 --packet 1 -j MARK --set-mark 2

done

 

[[Category:3rd Party Routers|Linux]]