Implementing Dynamic Rerouting in Kernel

Implementing Dynamic Rerouting in Kernel

[Ravish Kumar]

Hi Experts,

Need expert advice for the one of the requirement Where in VPN
solution we want to dynaically route the packets to different adapter.
We will manage our own DNS cache and , based on DNS to IP lookup, we
can redirect the packet either to Tun device or to a physical adapter.

Please suggest some design what i need to do.

Re: Implementing Dynamic Rerouting in Kernel

[Florian Fainelli]

On 05/11/2017 02:59 AM, Ravish Kumar wrote:
> Hi Experts,
> 
> Need expert advice for the one of the requirement Where in VPN
> solution we want to dynaically route the packets to different adapter.
> We will manage our own DNS cache and , based on DNS to IP lookup, we
> can redirect the packet either to Tun device or to a physical adapter.
> 
> Please suggest some design what i need to do.

What you are looking for can be done using ipset-dns from Jason:

https://git.zx2c4.com/ipset-dns/about/
-- 
Florian

Re: Implementing Dynamic Rerouting in Kernel

[Ravish Kumar]

Hi,

We do not want to add routes at run time rather i would prefer to have
a NetFilter driver which can intercept the packet and forward it to
desired interface.



On Thu, May 11, 2017 at 9:52 PM, Florian Fainelli <f.fainelli@gmail.com> wrote:
> On 05/11/2017 02:59 AM, Ravish Kumar wrote:
>> Hi Experts,
>>
>> Need expert advice for the one of the requirement Where in VPN
>> solution we want to dynaically route the packets to different adapter.
>> We will manage our own DNS cache and , based on DNS to IP lookup, we
>> can redirect the packet either to Tun device or to a physical adapter.
>>
>> Please suggest some design what i need to do.
>
> What you are looking for can be done using ipset-dns from Jason:
>
> https://git.zx2c4.com/ipset-dns/about/
> --
> Florian

Re: Implementing Dynamic Rerouting in Kernel

[Jason A. Donenfeld]

On Thu, May 11, 2017 at 6:22 PM, Florian Fainelli <f.fainelli@gmail.com> wrote:
> What you are looking for can be done using ipset-dns from Jason:
>
> https://git.zx2c4.com/ipset-dns/about/

Funny to see this project coming up. I actually ported this
functionality into dnsmasq directly a few weeks after writing
ipset-dns, since that's a much more robust place to put this sort of
feature. It's the --ipset option.