Support Center > Search Results > SecureKnowledge Details
'ip rule list' command shows duplicate PBR rules Technical Level
Symptoms
  • Output of "ip rule list" command in Expert mode shows duplicate PBR rules after enabling PBR and adding the relevant rules.

    Example:

    [Expert@HostName:0]# ip rule list
    0:      from all lookup 255 
    1003:   from 192.168.1.0/24 lookup 2 
    1003:   from 192.168.1.0/24 lookup 2 
    1003:   from 192.168.1.0/24 lookup 2 
    1003:   from 192.168.1.0/24 lookup 2 
    1003:   from 192.168.1.0/24 lookup 2 
    1004:   from 192.168.2.0/24 lookup 1 
    1004:   from 192.168.2.0/24 lookup 1 
    1004:   from 192.168.2.0/24 lookup 1 
    1004:   from 192.168.2.0/24 lookup 1 
    1004:   from 192.168.2.0/24 lookup 1 
    32766:  from all lookup main 
    32767:  from all lookup default
    
  • If you try to delete the PBR rule, then the base rule is deleted, yet the duplicate PBR rules remain.

Cause

Issue occurs when RouteD daemon is restarted and the PBR rules already exist in the OS.

Gaia OS kernel does not maintain unique rule entries. As such, RouteD daemon tries to push rules after it comes up and they are accepted by the kernel. In contrast, this does not happen with routes. When RouteD daemon tries to push the same route, the kernel rejects it.


Solution
Note: To view this solution you need to Sign In .