OpenWRT - VPN Policy Routing in Detail & Case Study

[@wulfy23]

Van Tech Corner is the man... not too fast... no too slow... just right! Cheers wulfy23

[@VanTechCorner]

Thanks wulfy23, I see you work on github. Nice work, keep it up!

[@trihar1000]

Finnally someone explain how to configure this. Interesting... 🤔🤔🤔 with this features Can I make custom rules for exclusive gaming rules and another rules with separated. Gaming rules will be come first priority traffic and following by another rules. So we can fix high latency issue when another client doing download/streaming. Is that possible? Or we can combine with load balancing, so gaming host will route to ISP1 "wan" and other host to ISP2 "wanB"? Anyway thanks you so much, this verry usefull

[@tharumaravi]

Thank you very much, how can I set up multiple VPN client connections and then assign each VPN to a device on LAN?

[@plica06]

Another really useful video. Thank you !

[@VanTechCorner]

Glad to hear that!

[@chuenamsakun7247]

Thanks for the video, how to set IPv6 ?

[@sandroshu]

I am experimenting with this using IPv6, but I can not get it to work even with basic policies. With v4 it works correctly. Do you have experience with this?

[@douniwan7233]

Been waiting for this! Will try immediately. Thanks.

[@simonghoul3602]

amazing work, it's perfectly clear how you are supposed to do this now I want to know though, can this be used on domains? instead of ips What I want to do is set my vpn to handle udp traffic. But then I also want to make googlevideo go through a proxy to the clearnet. Problem is, I don't want KZbin or Google to go through the proxy I'll keep looking around

[@cblack2863]

OMG! Thank You!! I really needed to learn about this topic. Love your content !!

[@douniwan7233]

There is a question I would like to ask is how to generate GFW rule that can alow blocked site through VPN?Any help would be appreciated！

[@ryanho786]

Hi , this is a great video that I 've been looking for. One question, in the Custom User File , can TARGET_FNAME="link_to_IP_list" be assigned with a URL ? let 's say a txt in github?

[@VanTechCorner]

Hi and sorry for the late response. I have yet to try this and Iassume that it will not working as the file is expected to be available locally.

[@jerrytancinco]

@vantech how about configuring per LAN port?

[@wavepirates]

Still good for WRT 22.03?

[@usto4361]

Sir, can i have 2 or more vpn connection simultaneously in same router? For example My xbox use vpn 1, my pc use vpn2, and other devices use internet w/o vpn. Is it possible? Thank you

[@karpwgalarecie2406]

Can you make video about setup vlans on new open wrt 21?

[@VanTechCorner]

Hi, do you mean VLAN for WAN? I have a video regarding this, you can check it out here kzbin.info/www/bejne/e6i8hYlmr5ufgM0

[@wznzgq1354]

great tutorial, what about ipv6 lists?

[@VanTechCorner]

Same, you can find it on the National Internet Center of your country or the IPS/Service Provider's homepage.

[@huugiangnguyen8366]

A ơi e muốn cấu hình pppoe tới 1 lan nào đấy có cách ko a?

[@margauxbelly5543]

Hi can you give me a script i hope you give me (Only Facebook traffic through VPN, the rest through WAN) can i change to other website?

[@agustinnacua2818]

hi , can you make tutorial for softethervpn client on openwrt. thank you.

[@_ntson]

Em làm theo hướng dẫn, nhưng thành ra em block hết toàn bộ truy cập vào IP VN, còn IP khác vào bình thường bằng vpn. Em check lại là làm theo hướng dẫn mà vẫn như vậy

[@diyer1190]

How can use in OpenVPN ,thanks

[@ihwanell5704]

can you upload video policy based routing, please?

[@VanTechCorner]

Hi, this is VPN Policy Routing. I am not really sure what is your question?

[@michaeldina1103]

YES!!!!!

[@VanTechCorner]

I hope this video will be useful for you. I see your comments on VPN related stuff :D

[@michaeldina1103]

@@VanTechCorner I enjoy networking topic. Policy routing by autonomous network criteria? First time I have ever seen that.

[@michaeldina1103]

@@VanTechCorner I had no idea you can route by autonomous system. I’m learning about networking and OpenWRT is a helpful learning tool. I still have a lot to learn.

[@kingofsoq]

I see David here. 🤣

[@VanTechCorner]

Lol, who is David :D

[@wznzgq1354]

very helpful, i do everything you do, but i get "Error running custom user file '/etc/vpn-policy-routing.aws.user'!"

[@VanTechCorner]

It is something wrong with the custom config file. Did you try with a different config file?

[@AlexanderSokolov-j5y]

Hi Bro, i have the same problem. Solution for me, enabled two options in LuCI "The ipset option for remote policies>use ipset" and "The ipset option for local policies>use ipset". Without this, I had an error in the logs: "ipset v7.3: error in line 1: the set with the given name does not exist". Good luck.

[@odhiambo0]

Thank you for this tutorial. I am getting this error on the UI: Error running custom user file '/etc/vpn-policy-routing.ke.user'! My /etc/vpn-policy-routing.ke.user is mode 755 (executable). My TARGET_FNAME="/etc/KE-IPs.lst" and the file /etc/KE-IPs.lst contains IP subnets in CIDR format, one per line. Is there a way to diagnose the cause of the error? I have tried to manually run the file /etc/vpn-policy-routing.ke.user and I get the following: root@OpenWrt:/etc# export TARGET_IPSET='wan' root@OpenWrt:/etc# export TARGET_FNAME="/etc/KE-IPs.lst" root@OpenWrt:/etc# awk -v ipset="$TARGET_IPSET" '{print "add " ipset " " $1}' "$TARGET_FNAME" | ipset restore -! && _ret=0 ipset v7.15: Missing second mandatory argument to command add Try `ipset help' for more information. root@OpenWrt:/etc# What am I missing from the command line?

[@VanTechCorner]

Hi, there is a new version of the VPN Policy Routing package, called Policy-Based-Routing (pbr) from the same author. I am not really good at the diagnose, maybe you can post the question here forum.openwrt.org/t/policy-based-routing-pbr-package-discussion/140639

[@odhiambo0]

@@VanTechCorner thank you very much. I found that new version 3 days ago and I have been using it successfully.