Re: [gentoo-user-ru] Squid и два аплинка

[Vladimir Solomatin]

On 10/22/2010 03:21 PM, Vladimir Solomatin wrote:

правила забыл указать

rules_eth2=(
         "from 77.241.x.x/28 to all table isp1 priority 530"
         "from 213.129.x.x/28 to all table isp2 priority 630"
         "from 213.128.x.x/28 to all table isp3 priority 730"
)

Правила как добавляются так и удаляются.

host ~# /etc/init.d/net.eth2 restart
  * Stopping eth2
  *   Bringing down eth2
  *     Shutting down eth2 
...                                                     [ ok ]
  *   Running postdown function
  *     Removing IP policy routing rules
  *       from 77.241.x.x/28 to all table isp1 priority 530 
...                    [ ok ]
  *       from 213.129.x.x/28 to all table isp2 priority 630 
...                   [ ok ]
  *       from 213.128.x.x/28 to all table isp3 priority 730 ...         
           [ ok ]
  * Starting eth2
  *   Bringing up eth2
  *     
77.241.x.x/28                                                              
[ ok ]
  *     
213.128.x.x/28                                                             
[ ok ]
  *     
213.129.x.x/28                                                             
[ ok ]
  *   Adding routes
  *     77.241.x.x/28 dev eth2 src 77.241.x.x table artnet proto static 
...        [ ok ]
  *     77.241.x.x/28 dev eth2 src 77.241.x.x table uvttk proto static 
...         [ ok ]
  *     77.241.x.x/28 dev eth2 src 77.241.x.x table sibintek proto 
static ...      [ ok ]
  *     77.241.x.x/28 dev eth2 src 77.241.x.x table domolink proto 
static ...      [ ok ]
  *     213.128.218.16/28 dev eth2 src 213.128.x.x table artnet proto 
static ...   [ ok ]
  *     213.128.218.16/28 dev eth2 src 213.128.x.x table uvttk proto 
static ...    [ ok ]
  *     213.128.218.16/28 dev eth2 src 213.128.x.x table sibintek proto 
static ... [ ok ]
  *     213.128.218.16/28 dev eth2 src 213.128.x.x table domolink proto 
static ... [ ok ]
  *     213.129.x.x/28 dev eth2 src 213.129.x.x table artnet proto 
static ...      [ ok ]
  *     213.129.x.x/28 dev eth2 src 213.129.x.x table uvttk proto static 
...       [ ok ]
  *     213.129.x.x/28 dev eth2 src 213.129.x.x table sibintek proto 
static ...    [ ok ]
  *     213.129.x.x/28 dev eth2 src 213.129.x.x table domolink proto 
static ...    [ ok ]
  *   Running postup function
  *     Adding IP policy routing rules
  *       from 77.241.x.x/28 to all table isp1 priority 530 
...                    [ ok ]
  *       from 213.129.x.x/28 to all table isp2 priority 630 
...                   [ ok ]
  *       from 213.128.x.x/28 to all table isp3 priority 730 
...                   [ ok ]

>>>> Добавка: если убрать концовку dev "${IFACE}"  в postup в строке
>>>>                     ip rule add ${x} dev "${IFACE}"
>>>> то postdown не сможет найти свои правила (т.к. оно их находит grepом по
>>>> iif ${IFACE}).
>>> Заменил ip rule add ${x} dev "${IFACE}" на ip rule add ${x} - работает.
>>>
>>> Сейчас буду думать как бы привязать правила к интерфейсу, чтобы
>>> postdown() могла их корректно удалить...
>>>
>> Можно попробовать получать список правил для удаления не из ip rule show
>> | grep что-нибудь, а из той же самой rules_...
>>
>
> В общем, вам либо поменять функции и убрать это добавление iif $IFACE,
> либо добавлять правила другим способом.

> config_eth2=(
>         "77.241.x.x/28 brd 77.241.x.x"
>         "213.128.x.x/28 brd 213.128.x.x"
>         "213.129.x.x/28 brd 213.129.x.x"
> )
>
> routes_eth2=(
>        "77.241.x.x/28 dev eth2 src 77.241.x.x table isp1 proto static"
>         "77.241.x.x/28 dev eth2 src 77.241.x.x table isp2 proto static"
>         "77.241.x.x/28 dev eth2 src 77.241.x.x table isp3 proto static"
>         "77.241.x.x/28 dev eth2 src 77.241.x.x table isp4 proto static"
>         "213.128.x.x/28 dev eth2 src 213.128.x.x table isp1 proto static"
>         "213.128.x.x/28 dev eth2 src 213.128.x.x table isp2 proto static"
>         "213.128.x.x/28 dev eth2 src 213.128.x.x table isp3 proto static"
>         "213.128.x.x/28 dev eth2 src 213.128.x.x table isp4 proto static"
>         "213.129.x.x/28 dev eth2 src 213.129.x.x table isp1 proto static"
>         "213.129.x.x/28 dev eth2 src 213.129.x.x table isp2 proto static"
>         "213.129.x.x/28 dev eth2 src 213.129.x.x table isp3 proto static"
>         "213.129.x.x/28 dev eth2 src 213.129.x.x table isp4 proto static"
> )
>
> postup() {
>         local x="rules_${IFVAR}[@]"
>         local -a rules=( "${!x}" )
>         if [[ -n ${rules} ]] ; then
>                 einfo "Adding IP policy routing rules"
>                 eindent
>                 # Ensure that the kernel supports policy routing
>                 if ! ip rule list | grep -q "^" ; then
>                         eerror "You need to enable IP Policy Routing
> (CONFIG_IP_MULTIPLE_TABLES)"
>                         eerror "in your kernel to use ip rules"
>                 else
>                         for x in "${rules[@]}" ; do
>                                 ebegin "${x}"
> #                               ip rule add ${x} dev "${IFACE}"
>                                 ip rule add ${x}
>                                 eend $?
>                         done
>                 fi
>                 eoutdent
>                 # Flush the cache
>                 ip route flush cache dev "${IFACE}"
>         fi
> }
>
> postdown() {
> #       Automatically erase any ip rules created in the example postup
> above
>         if interface_exists "${IFACE}" ; then
>                 local x="rules_${IFVAR}[@]"
>                 local -a rules=( "${!x}" )
>                 if [[ -n ${rules} ]] ; then
>                         einfo "Removing IP policy routing rules"
>                         eindent
>                         for x in "${rules[@]}" ; do
>                                 ebegin "${x}"
>                                 ip rule del ${x}
>                                 eend $?
>                         done
>                         eoutdent
>                         # Flush the route cache
>                         ip route flush cache dev "${IFACE}"
>                 fi
>         fi
>
>         # Return 0 always
>         return 0
> }
>
> см. http://geekscrap.com/2010/02/multiple-ip-uplinks-with-gentoo/
> --
> Vladimir Solomatin (slash@×××××.ru)
> Phone: + 7 (4732) 711711
> Relex Inc, Voronezh.


-- 
Vladimir Solomatin (slash@×××××.ru)
Phone: + 7 (4732) 711711
Relex Inc, Voronezh.