Linux 策略路由

Linux 策略路由的实现需要多个路由表和一个路由策略数据库(RPDB)。你可以通过输入以下命令列出 RPDB 中的策略:

"ip rule show"命令用于显示Linux系统上的路由策略和策略路由规则。在Linux系统中,路由策略是一种定义路由行为的方法,它可以基于源地址、目标地址或其他条件来选择特定的路由表。策略路由规则允许您根据不同的网络流量类型或者需要使用不同的路由策略,从而实现更灵活的路由管理。

具体来说,"ip rule show"命令将列出当前系统中定义的所有策略路由规则,并显示每个规则的优先级、匹配条件、ACTIONS列表等信息。例如:

0:      from all lookup local 
32765:  from 192.168.1.0/24 lookup custom
32766:  from all lookup main 
32767:  from all lookup default 

这个例子列出了四条策略路由规则。第一条规则(优先级为0)表示查找本地路由表;第二条规则(优先级为32765)表示对于源地址位于192.168.1.0/24网段的数据包应使用名为"custom"的路由表进行路由;第三条规则(优先级为32766)表示使用系统默认的主路由表;第四条规则(优先级为32767)表示查找默认路由表。

通过使用"ip rule add"命令,您可以向系统添加新的策略路由规则,以便更好地控制网络流量的路由。

chunk@chunk-ThinkPad-X1-Carbon-5th  /tmp/ai  ip rule show
0:	from all lookup local
32766:	from all lookup main
32767:	from all lookup default
 chunk@chunk-ThinkPad-X1-Carbon-5th  /tmp/ai  ip route list table local
local 10.200.0.1 dev docker0 proto kernel scope host src 10.200.0.1 
broadcast 10.200.255.255 dev docker0 proto kernel scope link src 10.200.0.1 linkdown 
local 127.0.0.0/8 dev lo proto kernel scope host src 127.0.0.1 
local 127.0.0.1 dev lo proto kernel scope host src 127.0.0.1 
broadcast 127.255.255.255 dev lo proto kernel scope link src 127.0.0.1 
local 172.22.0.1 dev br-e475e85b2ff7 proto kernel scope host src 172.22.0.1 
broadcast 172.22.255.255 dev br-e475e85b2ff7 proto kernel scope link src 172.22.0.1 
local 192.168.10.11 dev wlp4s0 proto kernel scope host src 192.168.10.11 
broadcast 192.168.10.255 dev wlp4s0 proto kernel scope link src 192.168.10.11 
local 192.168.122.1 dev virbr0 proto kernel scope host src 192.168.122.1 
broadcast 192.168.122.255 dev virbr0 proto kernel scope link src 192.168.122.1 linkdown 
local 192.168.250.1 dev anbox0 proto kernel scope host src 192.168.250.1 
broadcast 192.168.250.255 dev anbox0 proto kernel scope link src 192.168.250.1 linkdown 
 chunk@chunk-ThinkPad-X1-Carbon-5th  /tmp/ai  ip route list table main
default via 192.168.10.254 dev wlp4s0 proto dhcp metric 600 
10.200.0.0/16 dev docker0 proto kernel scope link src 10.200.0.1 linkdown 
169.254.0.0/16 dev virbr0 scope link metric 1000 linkdown 
172.22.0.0/16 dev br-e475e85b2ff7 proto kernel scope link src 172.22.0.1 
192.168.10.0/24 dev wlp4s0 proto kernel scope link src 192.168.10.11 metric 600 
192.168.122.0/24 dev virbr0 proto kernel scope link src 192.168.122.1 linkdown 
192.168.250.0/24 dev anbox0 proto kernel scope link src 192.168.250.1 linkdown 
 chunk@chunk-ThinkPad-X1-Carbon-5th  /tmp/ai  ip route list table default
Error: ipv4: FIB table does not exist.
Dump terminated
 ✘ chunk@chunk-ThinkPad-X1-Carbon-5th  /tmp/ai  ip route list table default
Error: ipv4: FIB table does not exist.
Dump terminated

参考:
策略路由

猜你喜欢

转载自blog.csdn.net/u010674101/article/details/131381670