so i've spent ages on this trying to fix it and i come with a bug and a solution... what i need though for closure though is to find out the why (and also for it to be fixed)
QoS/CAKE / FQ_CODEL IFB redirect fails at boot when WireGuard interface has fixed local port, but works with dynamic port or post-boot redirect (works when you set it up)
i had this issue where i'd set up QoS and then on boot it would break. then I randomly fixed it, then i got the bug back again and that sent me down a spiral of the past 6 hours figuring out how it worked and then didn't and ultimately its down to the listening port in the config
i migrated from pfsense+ and copied the configs across near enough exact (which used defined listening ports).
so i would like to know why this happens, it must be some kind of race condition but i dont get how, you'd imagine that a defined port would come up before an defined one
i'll throw an example
set interfaces input ifb99 description 'BUG TEST IFB'
set qos policy cake CAKE-BUG-TEST bandwidth '100mbit'
set qos policy cake CAKE-BUG-TEST description 'BUG TEST'
set qos policy cake CAKE-BUG-TEST flow-isolation dual-dst-host
set qos policy cake CAKE-BUG-TEST flow-isolation-nat
set qos policy cake CAKE-BUG-TEST rtt '100'
set qos interface ifb99 egress 'CAKE-BUG-TEST'
set interfaces wireguard wg99 description 'BUG TEST WG'
set interfaces wireguard wg99 address '10.99.99.1/32'
set interfaces wireguard wg99 private-key '<x>'
set interfaces wireguard wg99 port '51999'
^^ 👀
set interfaces wireguard wg99 redirect 'ifb99'^ not working
set interfaces input ifb99 description 'BUG TEST IFB' set qos policy cake CAKE-BUG-TEST bandwidth '100mbit' set qos policy cake CAKE-BUG-TEST description 'BUG TEST' set qos policy cake CAKE-BUG-TEST flow-isolation dual-dst-host set qos policy cake CAKE-BUG-TEST flow-isolation-nat set qos policy cake CAKE-BUG-TEST rtt '100' set qos interface ifb99 egress 'CAKE-BUG-TEST' set interfaces wireguard wg99 description 'BUG TEST' set interfaces wireguard wg99 address '10.99.99.1/32' set interfaces wireguard wg99 private-key '<x>' set interfaces wireguard wg99 redirect 'ifb99'
^ works
https://vyos.dev/T8413
https://github.com/vyos/vyos-1x/pull/5073
i found these randomly when trying to google around it