REPLY: 2:5020/545 642b5f04
MSGID: 2:5005/49 642bb430
CHRS: CP866 2
TZUTC: 0700
TID: hpt/fbsd 1.9.0-cur 2019-12-05
Dear Alexey,

04 Apr 23 02:08, you wrote to me:

 >>>> I am not familiar with Wireguard.
 TK>>> One of the best available VPN software. I have a wireguard
 TK>>> server running at home for remote access. See
 TK>>> https://www.wireguard.com/
 VS>> It has a major drawback as compared to GRE or IPIP. You cannot
 VS>> bind your side of the tunnel to a specific IP address (external
 VS>> address as related to the tunnel).

 AV> Whether you need to set up multiple tunnels with different links (I
 AV> guess this is the case), you may use VRF to keep them apart.

 AV> Linux does that just fine.

Yes, I implied a case with two upstream ISPs when you want two tunnels to pass
via different ISPs.

I'm sure there exist some clever solutions, but with GRE or IPIP you could
just use simple policy routing because the external src address is fixed.

Do you suggest placing the two upstream ISPs into different VRFs?

Victor Sudakov, VAS4-RIPE, VAS47-RIPN
--- GoldED+/BSD 1.1.5-b20170303-b20170303
 * Origin: Ulthar (2:5005/49)
SEEN-BY: 1/123 15/0 50/109 90/1 104/117 105/81 106/201 123/131 124/5016
SEEN-BY: 153/757 7715 154/10 203/0 218/700 221/0 1 6 226/30 227/114
SEEN-BY: 229/110 111 112 113 206 307 317 400 424 426 428 452 470 550
SEEN-BY: 229/664 700 240/1120 5832 266/512 280/464 5003 5006 5555
SEEN-BY: 282/1038 292/854 8125 301/1 113 812 310/31 317/3 320/219
SEEN-BY: 322/757 341/66 234 342/200 396/45 423/120 460/58 463/68 467/888
SEEN-BY: 633/267 280 281 410 412 418 420 509 712/848 770/1 5000/111
SEEN-BY: 5001/100 5005/49 53 5015/46 5020/545 715 830 846 1042 4441
SEEN-BY: 5030/49 5053/51 5054/8 5058/104 5064/56 5075/128 5080/102
SEEN-BY: 5083/1 444
PATH: 5005/49 5020/1042 301/1 280/464 633/280 229/426