How to fix asymmetric routing ?

Started by Voodoo, July 27, 2023, 11:23:17 PM

Previous topic - Next topic
July 27, 2023, 11:23:17 PM Last Edit: July 31, 2023, 01:39:50 PM by Voodoo
I have to setup bgp peering in a colo which gives us 2 upstream connections e.g. ISP1 & ISP2

So I setup OPNsense with having WAN1 and WAN2 announcing the bgp routes via frr plugin.

If I announce only to one ISP e.g. via WAN1 everything works as expected.

As soon as I announce to both ISP I get asymmetric routing and therefore TCP connections fail.

Is it possible to fix this in OPNsense without putting a dedicated router in front of it ?

Basically I just want OPNsense to be stateless for WAN1 & WAN2.

What are my options ?

you can use the prepend command to correct this.

Little update on this, OPNsense is actually stateless in this regard (state is tracked via floating interface)

Issue was something else with my upstream provider...