Pls, use masked packet marking #6817
reinerotto
started this conversation in
Ideas
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
I suggest, to use masked packet marking, i.e. for tproxy configuration. To avoid possible interference with other software, i.e. for PBR or auto failover between interfaces. Example:
meta l4proto { tcp, udp } meta mark set meta mark & 0xffffff00 | 0x00000001 tproxy ip to 127.0.0.1:1080 counter accept
ip rule add fwmark 1/0xff table 100 priority 500 #To have reasonable prio here avoids clash with mwan3-nft (openwrt)
All reactions