User:Jchdel: Difference between revisions
m (how to select fastest uplink on a router (alternative)) |
m (how to select fastest uplink on a router (optimization)) |
||
| Line 25: | Line 25: | ||
IPS[$i]="$(ip a s ${NICS[$i]}|awk '/inet/{print $2}'|cut -d/ -f1)" | IPS[$i]="$(ip a s ${NICS[$i]}|awk '/inet/{print $2}'|cut -d/ -f1)" | ||
[ -z "${IPS[$i]}" ] && GWS[$i]="" && continue | [ -z "${IPS[$i]}" ] && GWS[$i]="" && continue | ||
# disable kernel filtering of "unwanted" packets | |||
echo 0 > /proc/sys/net/ipv4/conf/${NICS[$i]}/rp_filter | |||
GWS[$i]="$(ip r | grep default | grep -v dead | grep ${NICS[$i]} | cut -d\ -f3)" | GWS[$i]="$(ip r | grep default | grep -v dead | grep ${NICS[$i]} | cut -d\ -f3)" | ||
[ -z "${GWS[$i]}" ] && continue | [ -z "${GWS[$i]}" ] && continue | ||
| Line 39: | Line 41: | ||
while $(ip rule del fwmark $i table $i);do .;done 2>/dev/null | while $(ip rule del fwmark $i table $i);do .;done 2>/dev/null | ||
ip rule add fwmark $i table $i prio ${i}0 | ip rule add fwmark $i table $i prio ${i}0 | ||
# | # MASQUERADE or SNAT ? | ||
iptables -t nat -I POSTROUTING -o ${NICS[$i]} -j MASQUERADE #SNAT --to-source ${IPS[$i]} | |||
done | done | ||
# activate changes in policy routing | # activate changes in policy routing | ||
| Line 54: | Line 56: | ||
done | done | ||
wait -n # first gateway to complete | wait -n # first gateway to complete | ||
# meanwhile, main routing table is still active | |||
INDEX=$(head -1 /tmp/router.order) | INDEX=$(head -1 /tmp/router.order) | ||
METRIC=1 | |||
for ((i=1; i<=$NNICS; i++)) | for ((i=1; i<=$NNICS; i++)) | ||
do | do | ||
[ -z "${GWS[$i]}" ] && continue | [ -z "${GWS[$i]}" ] && continue | ||
ip | ip route del default via ${GWS[$i]} dev ${NICS[$i]} | ||
done | done | ||
ip route add default via ${GWS[$INDEX]} dev ${NICS[$INDEX]} metric $METRIC | |||
echo 1 > /proc/sys/net/ipv4/ip_forward | |||
ip | |||
logger "Default route set via ${GWS[$INDEX]} dev ${NICS[$INDEX]}." | logger "Default route set via ${GWS[$INDEX]} dev ${NICS[$INDEX]}." | ||
wait | wait # other gateways | ||
cat /tmp/router.order | while read i | cat /tmp/router.order | while read i | ||
do | do | ||
[ $i -eq $INDEX ] && continue | [ $i -eq $INDEX ] && continue | ||
METRIC=$(($METRIC+1)) | METRIC=$(($METRIC+1)) | ||
ip r a default via ${GWS[$i]} dev ${NICS[$i]} metric $METRIC | ip r a default via ${GWS[$i]} dev ${NICS[$i]} metric $METRIC | ||
Revision as of 06:20, 20 October 2021
to be run periodically (I do it every minutes for a 3 ISP setup)
#!/bin/bash
# This script configure the router to use fastest available gateway
# as default one. It uses some bashism...
[ -f /tmp/router.order ] && logger "Already running" && exit 1
NICS=($(ip -br link|awk '{print $1}')) # index 0 is loopback (lo)
NNICS=$((${#NICS[@]}-1))
GWS=()
IPS=()
iptables -t mangle -F
iptables -t nat -F
# Did we lost all of our gateways?
ip route | grep -q default || \
for ((i=1; i<=$NNICS; i++))
do
ifdown ${NICS[$i]}
ifup ${NICS[$i]} && \
logger "${NICS[$i]} restarted." || \
logger "Unable to restart ${NICS[$i]}."
done
# Prepare routing tables for each gateway
for ((i=1; i<=$NNICS; i++))
do
IPS[$i]="$(ip a s ${NICS[$i]}|awk '/inet/{print $2}'|cut -d/ -f1)"
[ -z "${IPS[$i]}" ] && GWS[$i]="" && continue
# disable kernel filtering of "unwanted" packets
echo 0 > /proc/sys/net/ipv4/conf/${NICS[$i]}/rp_filter
GWS[$i]="$(ip r | grep default | grep -v dead | grep ${NICS[$i]} | cut -d\ -f3)"
[ -z "${GWS[$i]}" ] && continue
# duplicate main routing table for each live default gateway
ip route flush table $i
ip route show table main | grep -Ev ^default | while read ROUTE ; do
ip route add table $i $ROUTE
done
# add default gateway
ip route add table $i default via ${GWS[$i]} dev ${NICS[$i]}
# mark packets from localhost
iptables -t mangle -A OUTPUT -s ${IPS[$i]} -j MARK --set-mark $i
# activate alternate routing
while $(ip rule del fwmark $i table $i);do .;done 2>/dev/null
ip rule add fwmark $i table $i prio ${i}0
# MASQUERADE or SNAT ?
iptables -t nat -I POSTROUTING -o ${NICS[$i]} -j MASQUERADE #SNAT --to-source ${IPS[$i]}
done
# activate changes in policy routing
ip route flush cache
# ping same target via each gateway
for ((i=1; i<=$NNICS; i++))
do
[ -z "${GWS[$i]}" ] && continue
( ping -n -c 5 -q -I ${IPS[$i]} 1.1 >/dev/null \
&& logger "1.1 responded for ${IPS[$i]} dev ${NICS[$i]}" \
|| logger "No response from 1.1 for ${IPS[$i]} dev ${NICS[$i]}" ; \
echo $i >> /tmp/router.order ) &
done
wait -n # first gateway to complete
# meanwhile, main routing table is still active
INDEX=$(head -1 /tmp/router.order)
METRIC=1
for ((i=1; i<=$NNICS; i++))
do
[ -z "${GWS[$i]}" ] && continue
ip route del default via ${GWS[$i]} dev ${NICS[$i]}
done
ip route add default via ${GWS[$INDEX]} dev ${NICS[$INDEX]} metric $METRIC
echo 1 > /proc/sys/net/ipv4/ip_forward
logger "Default route set via ${GWS[$INDEX]} dev ${NICS[$INDEX]}."
wait # other gateways
cat /tmp/router.order | while read i
do
[ $i -eq $INDEX ] && continue
METRIC=$(($METRIC+1))
ip r a default via ${GWS[$i]} dev ${NICS[$i]} metric $METRIC
done
rm -f /tmp/router.order
exit 0