OK, local-route actually worked!
Thanks!

I've tinkered with this a bit , but a problem I have is that I need multiple ip addresses on the outgoing interface(s). I understand that Jool takes all ports, so It's needed for everything to work properly.
On my own WAN interface, this is not a problem, I can just assign another ip from my ISP.

Actually, it doesn't! :(
{F4050258}

That's great!
I tried running make interface_definitions in vyos-1x and copy in the changed files into my vyos install, but the files kept disappearing when rebooting, and couldn't figure out how to build an iso with your vyos 1-x repo.

if you are running the netfilter implementation, I think the iptables mangle is handled automatically.(I verified this by changing my Jool to netfilter and removed these lines below:

ip6tables -t mangle -A PREROUTING --destination 64:ff9b::/96 -j JOOL --instance default
iptables  -t mangle -A PREROUTING --destination 172.21.8.202 -p tcp --dport 1:65535 -j JOOL --instance default
iptables  -t mangle -A PREROUTING --destination 172.21.8.202 -p udp --dport 1:65535 -j JOOL --instance default
iptables  -t mangle -A PREROUTING --destination 172.21.8.202 -p icmp -j JOOL --instance default

Is it possible to add support for policy routing?

Sure, but its not being applied in the pdns recursor so I cant use static host mapping for ipv6 in my network, only locally on the vyos host. (It works fine with ipv4).

Thanks, Not really sure what happened, but I deleted config.boot and rebooted, Now it works to add a policy again.

Thanks!😀

Hi again, I found another bug, if I have two policy routes with the same table it tries to create the table twice, and it doesn't work because the table is already created:

Hi,
I applied your new policy-route.py manually, and now my ipv6 pbr works again!! Thanks a lot!

It works now! Thanks!

Thanks, I got it working now.

Hello, Sorry, but I tried this I get "Invalid certificate on CA certificate "test"

Thanks, works now.

Now this error appear when trying the latest image:

This bug exists for remote-host as well.

I don't know, I just use wide-dhcpv6-client to get the prefix i get from my ISP routed to vyos.

I solved this myself by building my own vyos iso and just adding --custom-package "wide-dhcpv6-client". I configured wide-dhcpv6 myself.
It works fine for now.

Any update when this can be used live? This prevents me fro using vyos😟