vyos/vyos-documentation
1
0
Fork 0
mirror of https://github.com/vyos/vyos-documentation.git synced 2025-10-26 08:41:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

pbr: rework initial passage

Browse Source
This commit is contained in:
Christian Poessinger 2019-11-19 07:33:41 +01:00
parent fd88f2324d
commit afb35e203e
1 changed files with 10 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
docs/routing/pbr.rst
View File

@ -1,10 +1,10 @@
.. _routing-pbr: .. _routing-pbr:
Policy-Based Routing (PBR) PBR
-------------------------- ---
VyOS supports Policy Routing, allowing traffic to be assigned to a different :abbr:`PBR (Policy-Based Routing)` allowing traffic to be assigned to different
routing table. Traffic can be matched using standard 5-tuple matching (source routing tables. Traffic can be matched using standard 5-tuple matching (source
address, destination address, protocol, source port, destination port). address, destination address, protocol, source port, destination port).
Transparent Proxy Transparent Proxy
@ -50,13 +50,15 @@ Routing tables that will be used in this example are:
* ``table 10`` Routing tabled used for VLAN 10 (192.168.188.0/24) * ``table 10`` Routing tabled used for VLAN 10 (192.168.188.0/24)
* ``table 11`` Routing tabled used for VLAN 11 (192.168.189.0/24) * ``table 11`` Routing tabled used for VLAN 11 (192.168.189.0/24)
* ``main`` Routing table used by VyOS and other interfaces not paritipating in PBR * ``main`` Routing table used by VyOS and other interfaces not paritipating in
PBR
.. figure:: ../_static/images/pbr_example_1.png .. figure:: ../_static/images/pbr_example_1.png
:scale: 80 % :scale: 80 %
:alt: PBR multiple uplinks :alt: PBR multiple uplinks
Policy-Based Routing with multiple ISP uplinks (source ./draw.io/pbr_example_1.drawio) Policy-Based Routing with multiple ISP uplinks
(source ./draw.io/pbr_example_1.drawio)
Add default routes for routing ``table 10`` and ``table 11`` Add default routes for routing ``table 10`` and ``table 11``
@ -94,5 +96,5 @@ Apply routing policy to **inbound** direction of out VLAN interfaces
set policy route PBR rule 10 destination address '192.168.189.0/24' set policy route PBR rule 10 destination address '192.168.189.0/24'
set policy route PBR rule 10 set table 'main' set policy route PBR rule 10 set table 'main'
.. note:: Allows the VLAN10 and VLAN20 hosts to communicate with each other using the .. note:: Allows the VLAN10 and VLAN20 hosts to communicate with each other
main routing table. using the main routing table.