[GH-ISSUE #1832] Routing setup for three jails, one of has two tun interfaces inside, the others are connected to it via <br> interfaces #1243

New issue

Closed

opened 2026-05-05 07:43:18 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 07:43:18 -06:00

Owner

Originally created by @Boyardism on GitHub (Mar 24, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1832

Okay, the setup is the following:

there is jail J1

it has 3 bridge interfaces connected to it, BR1, BR2 and BR3
J1 connects to outside world via BR1 (works, J1 can ping internet)

it has a script inside that setups two tun interfaces and relevant VPN processes (also works, tun0 and tun1 are created inside J1 and work, are not seen outside J1)

There are jails J2 and J3.
J2 shares interface BR2 with J1
J3 shares interface BR3 with J1

Thing I want to achieve (but fail to) is to route traffic from J2 via interface tun0, and route traffic from J3 through tun1

Both tun interfaces are inside J1

How do I do that?
Should I configure those routes "inside" J1?
Outside J1?

Originally created by @Boyardism on GitHub (Mar 24, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/1832 Okay, the setup is the following: there is jail J1 it has 3 bridge interfaces connected to it, BR1, BR2 and BR3 J1 connects to outside world via BR1 (works, J1 can ping internet) it has a script inside that setups two tun interfaces and relevant VPN processes (also works, tun0 and tun1 are created inside J1 and work, are not seen outside J1) There are jails J2 and J3. J2 shares interface BR2 with J1 J3 shares interface BR3 with J1 Thing I want to achieve (but fail to) is to route traffic from J2 via interface tun0, and route traffic from J3 through tun1 Both tun interfaces are inside J1 How do I do that? Should I configure those routes "inside" J1? Outside J1?

gitea-mirror closed this issue

2026-05-05 07:43:19 -06:00

gitea-mirror commented

2026-05-05 07:43:22 -06:00

Author

Owner

@rusty-snake commented on GitHub (Jun 29, 2019):

@Boyardism still need help?

@rusty-snake commented on GitHub (Jun 29, 2019): @Boyardism still need help?

gitea-mirror commented

2026-05-05 07:43:24 -06:00

Author

Owner

@ghost commented on GitHub (Jan 20, 2020):

Closing this due to inactivity.

@ghost commented on GitHub (Jan 20, 2020): Closing this due to inactivity.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1243

No description provided.

Rows
Columns