You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+8-8Lines changed: 8 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,4 +1,4 @@
1
-
# Approute-Utils
1
+
# App-Route-Jail
2
2
3
3
Tweaks to force application-specific routing on linux using SO_MARK, advanced routing, LD_PRELOAD and file namespace mounting.
4
4
It allows to route packets generated by socket-based application (almost any) using specicifed routing table. Supports application-specific DNS name resolution by substituting a modified resolv.conf for a namespace the app is running.
# Force an application to use a specific network interface
21
21
22
-
We need to find what gateway the network interface is using then force that gateway to our jailed application
22
+
We need to find what gateway the network interface is using then force that gateway to our jailed application and thus force the application to bind to a specific network interface
23
23
24
-
-Find the interface gateway (there are many solution to find the gateway here are some command that permit to find the used gateway)
24
+
-How to find the interface gateway (there are many solution to find the gateway here are some commands that permit to find the used gateway)
25
25
26
26
```
27
27
$ route
@@ -37,15 +37,15 @@ $ ip route show 0.0.0.0/0 dev eth0
- Add a route for the future marked packets (will belong to the jailed application) in the example `192.168.1.1` is used as the forced gateway, those routes wont affect other applications, this manipulation have to be done only once at the system boot for instance
48
+
- Add a route for the future marked packets (for the jailed application) in this example `192.168.1.1` is used as the forced gateway, this route rule wont affect other applications, this manipulation have to be done only once at the system boot for instance if you want to use this solution daily
49
49
50
50
```
51
51
ip rule add fwmark 10 table 100
@@ -58,7 +58,7 @@ ip route add default via 192.168.1.1 table 100
0 commit comments