Page MenuHomeVyOS Platform

Wan Load Balancing Multiple Regressions
Not ApplicablePublicBUG

Description

There are multiple bugs with wan load balancing affecting site to site tunnels (vti/gre tunnels excepted)
multiple issues with local traffic routing, pppoe and dhcp wan interfaces
and issues with not following the pbr of loadbalancing and instead using the default route.
enable-local-traffic under the wan load balancing has no bearing on these issues

https://forum.vyos.io/t/wan-load-balance-failover-trouble-with-dhcp/889
https://forum.vyos.io/t/ipsec-site-to-site-with-wan-loadbalancing-not-routing/1180
https://forum.vyos.io/t/wan-lb-and-mss-clamping-issues/8963/2
https://forum.vyos.io/t/multi-wan-load-balancing-configurations-have-no-effect/8738
https://forum.vyos.io/t/snat-rules-generated-by-load-balancing/2056/11
https://forum.vyos.io/t/wan-load-balance-rules-to-allow-local-traffic/3686/6

it seems that rules created in wan load balancing don't get followed by vyos itself.
https://phabricator.vyos.net/T305
https://phabricator.vyos.net/T375
https://phabricator.vyos.net/T2747
https://phabricator.vyos.net/T4362
https://phabricator.vyos.net/T4352

vyos@E1# show load-balancing wan
 disable-source-nat
 enable-local-traffic
 flush-connections

a complete rework of the load balancing package is required it seems.
first steps should be discussed.

Details

Version
All
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Bug (incorrect behavior)

Event Timeline

masterit triaged this task as High priority.
masterit created this object in space S1 VyOS Public.

Task for rewriting wan-loadbalancing to XML/Python T4470

syncer added subscribers: zsdc, syncer.

@zsdc @v.huti this requires your attention

syncer changed the subtype of this task from "Task" to "Bug".Feb 10 2023, 1:41 AM
syncer lowered the priority of this task from High to Normal.Jul 11 2023, 12:31 PM
syncer edited projects, added VyOS Rolling; removed VyOS 1.3 Equuleus (1.3.9).
syncer added subscribers: sarthurdev, v.huti.

@sarthurdev, I am assigning this to you
maybe some of this will be useful for rewrite

Hello, I know that to debug, I have to read the tables

sudo nft list ruleset

And I want to know what's the correct table looks like, as I can see that the connection was clearly marked but it doesn't use the intended static table 201-202-203, etc.

sarthurdev moved this task from Need Triage to Completed on the VyOS Rolling board.

Closing this, new tasks can be opened for any issues found in new WLB.