netdev - GRE Tunnel Over Linux VRF

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAFZsvkmCyRdOePeedok0b6Hn4PR-FPcNjfY7sWBzSBOAW+HRWg@mail.gmail.com>
Date:   Mon, 19 Oct 2020 17:59:56 +0300
From:   לירן אודיז <liranodiz@...il.com>
To:     netdev@...r.kernel.org
Subject: GRE Tunnel Over Linux VRF

Hi, i am trying to create GRE tunnel over vrf.
after binding  the GRE tunnel interface (also the LAN & WAN
interfaces) to VRF, the traffic didn't forwarded via the WAN
interface,  the path is LAN(VRx)----->GRE--x-->WAN(VRx) .
only while the WAN interface is binding to the default router, the
traffic forwarded correctly via the WAN interface, the path is
LAN(VRx)----->GRE----->WAN(VRx).

used configuration:
ifconfig lan1 80.80.80.1/24 up
ifconfig wan2 50.50.50.1/24 up
ip link add VR2 type vrf table 2
ip link set dev VR2 up
ip route add table 2 unreachable default metric 4278198272
ip tunnel add greT2 mode gre local 50.50.50.1 remote 50.50.50.2
ip addr add 55.55.55.1/24 dev greT2
ip link set greT2 up
ip link set dev greT2 master VR2
ip link set dev lan1 master VR2
ip link set dev wan2 master VR2
ip route add vrf VR2 90.90.90.0/24 via 55.55.55.2

what is the correct way to create GRE tunnel over VRF.
Thank for support.

BR, Liran