Possible improvement to policy based routing for VPN

[David Partridge]

I've just installed Xwrt-Vortex 380.66_2 onto a Netgear R7000 which replaces a BT Homehub 5A running LEDE which didn't have the processing power to support a VPN.

The OpenWRT VPN policy based routing written by "stangri" is easier to use for destination sites as you specify the target website using its DNS name (e.g. http://speedtest.btwholesale.com/) rather than needing to specify IP addresses or (in this case) two separate IP subnets (193.113.4.152/30 and 193.113.8.192/30). The advantage is two-fold:

1. You are insulated from IP address changes for the domain (if they add/remove/change servers).
   
2. You don't need to worry about specifying routing using IP subnets

For details please see: https://github.com/stangri/openwrt-...ng/net/openvpn-policy-routing/files/README.md

I'd like to ask Merlin if he would liaise with "stangri" to bring this capability over to AsusWRT and therefore for Xwrt-Vortex.

Thanks a lot
Dave

 

[RMerlin]

His implementation is based on iptables, while mine is based on RPDB. Different mechanism, can't use his mechanism as it's incompatible with Asus's code.

 

[David Partridge]

His implementation is based on iptables, while mine is based on RPDB. Different mechanism, can't use his mechanism as it's incompatible with Asus's code.

That's a shame. Does that mean it wouldn't be possible to take the concept of using DNS names and re-implementing to use RPDB?

Dave