New commits:
commit 8918ed4142816d96cea74294792fe244af0231cf
Merge: a6a0199078 6b447ff09a
Author: Andrew Cagney <[email protected]>
Date: Wed May 8 18:32:30 2024 -0400
xfrmi: respect metric config for xfrmi table route (by Wolfgang Nothdurft)
Merge branch 'xfrmi-metric'
Signed-off-by: Andrew Cagney <[email protected]>
commit 6b447ff09a9e8cac79253e7fee06e264b95aa36d
Author: Andrew Cagney <[email protected]>
Date: Tue May 7 13:08:21 2024 -0400
testing: add ikev2-xfrmi-13-multiple-tunnels-metric to TESTLIST
commit a138d3655c327f128fed0ccd7302f1403a85fb59
Author: Wolfgang Nothdurft <[email protected]>
Date: Mon May 6 14:05:57 2024 +0200
xfrmi: respect metric config for xfrmi table route
commit f665a576724166fe894a0548fc54e1feb3403acb
Author: Wolfgang Nothdurft <[email protected]>
Date: Mon May 6 13:53:57 2024 +0200
testing: add test for multiple tunnels with xfrmi, mark-out and metric set
This test verifies that routes in the routing table 50 are not deleted by
other states when using multiple tunnels with xfrmi, mark-out and metric to the
same peer.
That can happen if you have a subnet and a gateway tunnel to the same peer
without using different metric settings.
north #
ipsec briefconnectionstatus
192.1.3.33 <==> 192.1.2.23 from 192.1.3.33 to 192.1.2.23 (84B/84B)
north-east-gw, reqid=16388
192.1.3.33 <==> 192.0.21.0/24 from 192.1.3.33 to 192.1.2.23 (84B/84B)
north-east-sn, reqid=16392
# Total IPsec connections: loaded 2, active 2
north #
ip r
default via 192.1.3.254 dev eth1
192.0.3.0/24 dev eth0 proto kernel scope link src 192.0.3.254
192.0.21.0/24 dev ipsec1 scope link metric 2050
192.1.2.23 dev ipsec1 scope link metric 2049
192.1.3.0/24 dev eth1 proto kernel scope link src 192.1.3.33
north #
ip r list table 50
192.1.2.23 via 192.1.3.254 dev eth1 metric 2049
192.1.2.23 via 192.1.3.254 dev eth1 metric 2050
north #
ip ru
0: from all lookup local
100: from all to 192.1.2.23 fwmark 0x1 lookup 50
100: from all to 192.0.21.0/24 fwmark 0x1 lookup 50
32766: from all lookup main
32767: from all lookup default
_______________________________________________
Swan-commit mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan-commit
