Re: Load-balancing explained?

When looking at the routing tables, strongSwan is using fwmark 0xffffffff.

 In your LB engine, do you keep this0xffffffff fwmark or overwrite it with your LB fwmarks?

admin@router-b:~$ ip rule show
0:      from all lookup local 
201:    from all fwmark 0x64800000/0x7f800000 lookup 201 
202:    from all fwmark 0x65000000/0x7f800000 lookup 202 
220:    not from all fwmark 0xffffffff lookup 220 
32766:  from all lookup main 
32767:  from all lookup default 

Also, why in LB scenario strongswan never puts anything in table 220?

While without LB configured, strongswan properly populates table 220 with all tunnel routes.