User:Jchdel: Difference between revisions

From Alpine Linux
m (how to select fastest uplink on a router (alternative))
m (Replaced content with "I run it on alpine 3.13: https://github.com/jchdel/select-fastest-gateway")
Tag: Replaced
(One intermediate revision by the same user not shown)
Line 1: Line 1:
to be run periodically (I do it every minutes for a 3 ISP setup)
I run it on alpine 3.13: https://github.com/jchdel/select-fastest-gateway
<pre>
#!/bin/bash
# This script configure the router to use fastest available gateway
# as default one. It uses some bashism...
[ -f /tmp/router.order ] && logger "Already running" && exit 1
NICS=($(ip -br link|awk '{print $1}')) # index 0 is loopback (lo)
NNICS=$((${#NICS[@]}-1))
GWS=()
IPS=()
iptables -t mangle -F
iptables -t nat -F
# Did we lost all of our gateways?
ip route | grep -q default || \
for ((i=1; i<=$NNICS; i++))
do
ifdown ${NICS[$i]}
ifup ${NICS[$i]} && \
logger "${NICS[$i]} restarted." || \
logger "Unable to restart ${NICS[$i]}."
done
# Prepare routing tables for each gateway
for ((i=1; i<=$NNICS; i++))
do
IPS[$i]="$(ip a s ${NICS[$i]}|awk '/inet/{print $2}'|cut -d/ -f1)"
[ -z "${IPS[$i]}" ] && GWS[$i]="" && continue
GWS[$i]="$(ip r | grep default | grep -v dead | grep ${NICS[$i]} | cut -d\  -f3)"
[ -z "${GWS[$i]}" ] && continue
# duplicate main routing table for each live default gateway
ip route flush table $i
ip route show table main | grep -Ev ^default | while read ROUTE ; do
ip route add table $i $ROUTE
done
# add default gateway
ip route add table $i default via ${GWS[$i]} dev ${NICS[$i]}
# mark packets from localhost
iptables -t mangle -A OUTPUT -s ${IPS[$i]} -j MARK --set-mark $i
# activate alternate routing
while $(ip rule del fwmark $i table $i);do .;done 2>/dev/null
ip rule add fwmark $i table $i prio ${i}0
# disable kernel filtering of "unwanted" packets
echo 0 > /proc/sys/net/ipv4/conf/${NICS[$i]}/rp_filter
done
# activate changes in policy routing
ip route flush cache
# ping same target via each gateway
for ((i=1; i<=$NNICS; i++))
do
[ -z "${GWS[$i]}" ] && continue
( ping -n -c 5 -q -I ${IPS[$i]} 1.1 >/dev/null \
&& logger "1.1 responded for ${IPS[$i]} dev ${NICS[$i]}" \
|| logger "No response from 1.1 for ${IPS[$i]} dev ${NICS[$i]}" ; \
echo $i >> /tmp/router.order ) &
done
wait -n # first gateway to complete
INDEX=$(head -1 /tmp/router.order)
# set default router for FORWARDED packets
iptables -t mangle -A FORWARD -j MARK --set-mark $INDEX
# MASQUERADE or SNAT ?
iptables -t nat -I POSTROUTING -o ${NICS[$INDEX]} -j MASQUERADE #SNAT --to-source ${IPS[$INDEX]}
ip route flush cache # not sure this one is needed?
logger "Default route set via ${GWS[$INDEX]} dev ${NICS[$INDEX]}."
wait # other gateways to complete
rm -f /tmp/router.order
exit 0
</pre>
or
<pre>
wait -n
for ((i=1; i<=$NNICS; i++))
do
[ -z "${GWS[$i]}" ] && continue
ip r del default via ${GWS[$i]} dev ${NICS[$i]}
done
INDEX=$(head -1 /tmp/router.order)
METRIC=1
[ -z "${GWS[$INDEX]}" ] || \
ip r a default via ${GWS[$INDEX]} dev ${NICS[$INDEX]} metric $METRIC
# MASQUERADE or SNAT ?
iptables -t nat -I POSTROUTING -o ${NICS[$INDEX]} -j MASQUERADE #SNAT --to-source ${IPS[$INDEX]}
logger "Default route set via ${GWS[$INDEX]} dev ${NICS[$INDEX]}."
wait
cat /tmp/router.order | while read i
do
[ $i -eq $INDEX ] && continue
[ -z "${GWS[$i]}" ] && continue
METRIC=$(($METRIC+1))
ip r a default via ${GWS[$i]} dev ${NICS[$i]} metric $METRIC
done
rm -f /tmp/router.order
exit 0
</pre>

Revision as of 15:02, 20 October 2021