WAN Load-Balancing & Unexpected Internet Banking Problem

[ciprian.craciun]

@LinuksGuru

set policy route SRCROUTE-WWWOUT-SINTF
[...]
set protocols static table 1 route 0.0.0.0/0 next-hop gw.isp2.xx.xx
set interfaces ethernet eth3 policy route SRCROUTE-WWWOUT-SINTF

It failed, outgoing web traffic stopped, I suspect “static table 1” somehow interference with something else. Can’t experiment in working busy environment for a long, disconnected one link. Kinda awkward, but have no other choice for now.

I don’t know how VyOS translates the set interfaces ethernet eth3 policy route, but I bet it uses iptables. Therefore I doubt those rules would come before the WAN load-balancing policy ones.

(Could you paste the iptables -t nat -S and iptables -t mangle -S for reference?)

---

Moreover please note that the WAN load-balancing feature uses the tables starting from 1, thus including the one you have configured. Try to use another number, say 512 or above.

In order to see how the rules are applied use ip rule show and ip route show table X, where X is either default (should be empty), main or the number you have chosen.