3 ms·
> Instead it installs rules for 0.0.0.0/1 and 128.0.0.0/1, creating a rule that has slightly higher priority More specific prefix isn’t slightly better, prefix
by allarm 4y ago
> Instead it installs rules for 0.0.0.0/1 and 128.0.0.0/1, creating a rule that has slightly higher priority
More specific prefix isn’t slightly better, prefix length is one of the most significant rules of routing. This trick is quite common in networking - you point more specific routes to the main link and less specific to a backup. It the main link go down the specifics are getting withdrawn (some mechanism like dynamic routing should be in place for that) and the less specific route takes place, redirecting the traffic over the backup link.
- topranks 4y agoI’ve done this myself many times (network engineer). But tbh I see it as something of a “hack”. My gut tells me it’s not the right way for something like OpenVPN to do by default. A metric would be better on 0/0, but I can see how the two /1 routes is gonna fix things in a whole bunch of edge cases.