ligang/vpp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

wireguard: increase FIB source priority

Browse Source 
Type: fix

Signed-off-by: Neale Ranns <nranns@cisco.com>
Change-Id: Icc1c458474d357c7d9b3b4df1897500de0c314a1
(cherry picked from commit a26b0d11e91e9abca6220e50f0240ab6ae09c6d3)
This commit is contained in:
Neale Ranns
2020-09-14 08:29:05 +00:00
parent c71dad4a2d
commit 58db34c2ca
1 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/plugins/wireguard/wireguard_peer.c
View File

@ -401,8 +401,13 @@ format_wg_peer (u8 * s, va_list * va)
static clib_error_t *
wg_peer_module_init (vlib_main_t * vm)
{
wg_fib_source = fib_source_allocate ("wireguard", 0xb0, //
FIB_SOURCE_BH_SIMPLE);
/*
* use a priority better than interface source, so that
* if the same subnet is added to the wg interface and is
* used as an allowed IP, then the wireguard soueced prefix
* wins and traffic is routed to the endpoint rather than dropped
*/
wg_fib_source = fib_source_allocate ("wireguard", 0x2, FIB_SOURCE_BH_API);
return (NULL);
}