From: Arvid Picciani <firstname.lastname@example.org> To: email@example.com Subject: separate allowedips from routing for multipath Date: Thu, 9 Dec 2021 16:36:17 +0100 [thread overview] Message-ID: <CACD9L=CAinAO0CHRR25-sEoxCqNp_8BCqU9kJLK-Wztfirstname.lastname@example.org> (raw) Hey, i'm considering using wireguard for a system where there can be multiple routes to an ip. The nearest solution i can think of is constantly changing the peer AllowedIps from userspace and load a large list of routes into it. But the challenge is that this is used for both routing decisions AND policy decisions. let's say we have 3 machines A1, A2, B and a machine that moves around V V is currently connected via layer2 at A1, B has V in AllowedIps for peer A1, so that any packet for V is routed to A1 now we connect V to A2 instead we need to move the AllowedIps entry from A1 to A2 so that a packet for V is routed to A2 old packets still arriving FROM V through A1 are now dropped This wouldnt be an issue if AllowedIps could be separated from the routing decision somehow. I could have a wg interface per peer so i can do the routing using regular linux tools, but wg doesnt like reusing the same port for multiple wg endpoints. We'll eventually run out of ports. I suppose port reuse is intentionally not allowed? thanks Arvid
next reply other threads:[~2021-12-10 23:01 UTC|newest] Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top 2021-12-09 15:36 Arvid Picciani [this message] 2021-12-10 23:29 ` Reid Rankin 2021-12-11 7:28 ` Arvid Picciani
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox Avoid top-posting and favor interleaved quoting: https://en.wikipedia.org/wiki/Posting_style#Interleaved_style * Reply using the --to, --cc, and --in-reply-to switches of git-send-email(1): git send-email \ --in-reply-to='CACD9L=CAinAO0CHRR25-sEoxCqNp_8BCqU9kJLK-Wztemail@example.com' \ --firstname.lastname@example.org \ --email@example.com \ --subject='Re: separate allowedips from routing for multipath' \ /path/to/YOUR_REPLY https://kernel.org/pub/software/scm/git/docs/git-send-email.html * If your mail client supports setting the In-Reply-To header via mailto: links, try the mailto: link
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox; as well as URLs for NNTP newsgroup(s).