daeuniverse / dae

eBPF-based Linux high-performance transparent proxy solution.
GNU Affero General Public License v3.0
3.26k stars 202 forks source link

[Bug Report] 绑定lan的接口中创建的vlan上dns流量会被劫持,且无法得到解析结果 #631

Closed jasonwei23 closed 4 weeks ago

jasonwei23 commented 1 month ago

Checks

Current Behavior

关联#594 ,在br-lan上的vlan-id为2的接口br-lan.2,lan_interface只绑定br-lan,wan_interface留空。当routing中将rfc1918 ip设置为must_direct,br-lan.2下局域网设备可以通过运行dae路由上的dns服务器正常工作,但直接使用公共dns则timeout。推测是vlan上的dns流量也被劫持到了dae0且没有得到正确处理。 Snipaste_2024-09-13_23-43-15

Expected Behavior

vlan上的dns流量应遵守lan_interface绑定规则

Steps to Reproduce

添加vlan,分配防火墙 image

Environment

Anything else?

No response

dae-prow[bot] commented 1 month ago

Thanks for opening this issue!