Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PBR doesn't work (it doesn't add port information into the ip rule commands). #18477

Open
2 tasks done
foxnetwork-ru opened this issue Mar 24, 2025 · 0 comments
Open
2 tasks done
Labels
triage Needs further investigation

Comments

@foxnetwork-ru
Copy link

Description

I configure PBR inside FRR. But I see no traffic following my PBR rules. It works when I use src-ip. And it doesn't work when I use src-port.

Version

10.1.2

How to reproduce

My config
`sho run
Building configuration...

Current configuration:
!
frr version 10.1.2
frr defaults datacenter
hostname test
no ip forwarding
no ipv6 forwarding
pbr nexthop-resolve
pbr table range 10000 20000
!
ip route 0.0.0.0/0 192.168.0.2
!
interface ens33
shutdown
exit
!
interface ens36
ip address 192.168.0.138/24
pbr-policy test
exit
!
interface lo
ip address 2.2.2.2/32
ip address 22.22.22.22/32
pbr-policy test
exit
!
nexthop-group test139
nexthop 192.168.0.139
exit
!
nexthop-group test141
nexthop 192.168.0.141
exit
!
pbr-map test seq 10
match src-port 80
set nexthop-group test139
exit
!
pbr-map test seq 20
match src-port 8080
set nexthop-group test141
exit
!
end`

Expected behavior

Traffic should obey to the PBR rules configured.

Actual behavior

Traffic doesn't obey to the PBR rules configured.

Additional context

As I can see, no information is translated into ip rule commands.

ip rule
0: from all lookup local
309: from all iif ens36 lookup 10000 proto zebra
309: from all iif lo lookup 10000 proto zebra
319: from all iif ens36 lookup 10001 proto zebra
319: from all iif lo lookup 10001 proto zebra
32766: from all lookup main
32767: from all lookup default

Checklist

  • I have searched the open issues for this bug.
  • I have not included sensitive information in this report.
@foxnetwork-ru foxnetwork-ru added the triage Needs further investigation label Mar 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
triage Needs further investigation
Projects
None yet
Development

No branches or pull requests

1 participant