So you want to say that till 7.13 was old kernetl and on 7.14 beta is a new one ? And because of this need to remove functionality which persist in all another routers vendors ?Thank you very much for your concerns and bringing it up to the attention.
v7 is now using new linux kernel with proper VRF implementation, which of course will lead to completely different operation principles. VRF has its own vrfinterface which is used as a loopback for all the traffic that needs to be forwarded to that vrf. When MPLS packet is send to loopback Linux moves it to LOCAL_OUT with all the consequences.
We have updated documentation how packet is processed arriving from the MPLS cloud:
https://help.mikrotik.com/docs/display/ ... -MPLSIPVPN
Special care now must be taken when designing firewall on the PE routers.
Statistics: Posted by uCZBpmK6pwoZg7LR — Thu Feb 08, 2024 9:46 am