Timotej Lazar 5a9f0ac26a exit: strip own AS prefix from routes received by firewalls ... For some reason routes with own ASN are not imported into default VRF. Maybe also others. These routes forward packets through the firewalls. As long as both exits are up this is not a problem, because routes going to peer exit don’t include this exit’s own ASN. If the peer goes down, all remaining routes sent by firewalls have our own ASN and are not imported into default VRF, so L3 servers lose connectivity to internal networks. If the exit strips own ASN from received routes, importing works OK. We strip both our and peer’s ASNs to keep path lengths the same. This has involved an indecent amount of poking knobs and knobbing pokes and it might cause other issues elsewhere.		2024-09-21 16:32:28 +02:00
..
firewall.intf.j2	Initial commit, squashed	2023-12-18 12:55:47 +01:00
frr.conf.j2	exit: strip own AS prefix from routes received by firewalls	2024-09-21 16:32:28 +02:00
isc-dhcp-relay.j2	exit: add DHCP relay for new server	2024-07-14 14:51:23 +02:00
keepalived.conf.j2	exit: add DHCP relay for new server	2024-07-14 14:51:23 +02:00
networks.intf.j2	exit: allow multiple VLANs per VRF	2024-08-04 14:12:26 +02:00
radvd.conf.j2	exit: only send RAs on interfaces with FHRP addresses	2024-08-13 19:12:29 +02:00