[strongSwan] route traffic to docker0 bridge

Christoph Gysin christoph.gysin at gmail.com
Wed Oct 11 16:38:02 CEST 2017

Docker creates a bridge docker0 and routes traffic through it:

$ brctl show
bridge name     bridge id               STP enabled     interfaces
docker0         8000.0242e39e4cfd       no              vethc5308b1

$ ip route
[...] dev docker0 proto kernel scope link src linkdown

After starting an ipsec connection, this stops working.

I'm trying to understand how traffic is routed, and read:

I can see it created the routing table 220:

$ ip route show table 220
default via dev wlp2s0 proto static src

I also found some pointers in https://wiki.strongswan.org/issues/1247,
but I'm still not sure what is the right way to fix this.

How can I configure my system to allow traffic to be
routed to docker0 even when the ipsec connection is up?

echo mailto: NOSPAM !#$.'<*>'|sed 's. ..'|tr "<*> !#:2" org at fr33z3

More information about the Users mailing list