Hi,
I’m using vyos 1.4-rolling-202306210317, I want to mark all traffic to doh server address list with 10 and redirect traffics that has been mark with 10 to my qos shaper class 10. But they are failed, when i check using ‘show conntrack table ipv4’ there is no mark at all, all is zero, then i check using ‘tc -s class show dev wlan0’, all goes to default. What i missed, can you help? Here is my settings,
policy {
route DOH {
interface wlan0
rule 10 {
destination {
group {
address-group DOH_ADDR
}
}
set {
mark 10
}
}
}
}
Out to wan (wlan0). I’m still new to this OS, i have searched but still can not find what command to use to view connection Mark statistic. I want to mark all connection going out through wan to doh public server not the packet. That DOH_ADDR contains doh public address which i want to redirect to class 10 in shaper ISP-BYU.
In iptables, it is equivalent to iptables -t mangle -A WAN-OUT -m set --match-set dohblock dst -j MARK --set-mark 10
Why no policy route for outbound?
Indeed , it makes no sense to alter routing decision, as it’s already made. But mangle policies can do way more than that. (alter DSCP , marking TTL…)
And why no error applying outbound.?
I don’t want to alter the route. I just want to redirect it to one of my traffic shaping class. The route is still the same. And if its a network address with prefix i don’t confuse anything but its a collection of internet public server ip address. How to do it in vyos?