Skip to content

Instantly share code, notes, and snippets.

@Apsu
Last active February 12, 2024 07:08
Show Gist options
  • Save Apsu/5021255 to your computer and use it in GitHub Desktop.
Save Apsu/5021255 to your computer and use it in GitHub Desktop.
An example failover script for dual WAN, using a ping healthcheck and managing default routes appropriately
#!/bin/bash
# Set defaults if not provided by environment
CHECK_DELAY=${CHECK_DELAY:-5}
CHECK_IP=${CHECK_IP:-8.8.8.8}
PRIMARY_IF=${PRIMARY_IF:-eth0}
PRIMARY_GW=${PRIMARY_GW:-1.2.3.4}
BACKUP_IF=${BACKUP_IF:-eth1}
BACKUP_GW=${BACKUP_GW:-2.3.4.5}
# Compare arg with current default gateway interface for route to healthcheck IP
gateway_if() {
[[ "$1" = "$(ip r g "$CHECK_IP" | sed -rn 's/^.*dev ([^ ]*).*$/\1/p')" ]]
}
# Cycle healthcheck continuously with specified delay
while sleep "$CHECK_DELAY"
do
# If healthcheck succeeds from primary interface
if ping -I "$PRIMARY_IF" -c1 "$CHECK_IP" &>/dev/null
then
# Are we using the backup?
if gateway_if "$BACKUP_IF"
then # Switch to primary
ip r d default via "$BACKUP_GW" dev "$BACKUP_IF"
ip r a default via "$PRIMARY_GW" dev "$PRIMARY_IF"
fi
else
# Are we using the primary?
if gateway_if "$PRIMARY_IF"
then # Switch to backup
ip r d default via "$PRIMARY_GW" dev "$PRIMARY_IF"
ip r a default via "$BACKUP_GW" dev "$BACKUP_IF"
fi
fi
done
@BaiBorko
Copy link

BaiBorko commented Jan 31, 2022

Here is my little change of the script . The logic is the same , but if it switches to the failover gateway because of lost ping , the check will continue through the primary interface . When the connectivity from primary interface is restored the script will switch back to the primary gateway.

#!/bin/bash

Set defaults if not provided by environment

CHECK_DELAY=${CHECK_DELAY:-5}
CHECK_IP=${CHECK_IP:-8.8.8.8}
PRIMARY_IF=${PRIMARY_IF:-eth0}
PRIMARY_GW=${PRIMARY_GW:-1.2.3.4}
BACKUP_IF=${BACKUP_IF:-eth1}
BACKUP_GW=${BACKUP_GW:-2.3.4.5}

Compare arg with current default gateway interface for route to healthcheck IP

gateway_if() {
[[ "$1" = "$(ip r g "$CHECK_IP" | sed -rn 's/^.dev ([^ ]).*$/\1/p')" ]]
}

Cycle healthcheck continuously with specified delay

while sleep "$CHECK_DELAY"
do
if gateway_if "$BACKUP_IF"
then
ip r a "$CHECK_IP" via "$PRIMARY_GW" dev "$PRIMARY_IF"
PING_PRIMARY_IF=ping -I "$PRIMARY_IF" -c1 "$CHECK_IP"|grep 'packet loss'|cut -d ' ' -f4
ip r d "$CHECK_IP" via "$PRIMARY_GW" dev "$PRIMARY_IF"
sleep 1
else
PING_PRIMARY_IF=ping -I "$PRIMARY_IF" -c1 "$CHECK_IP"|grep 'packet loss'|cut -d ' ' -f4
fi

If healthcheck succeeds from primary interface

if [ $PING_PRIMARY_IF -eq 1 ]; then
# # Are we using the backup?
if gateway_if "$BACKUP_IF"
then # Switch to primary
ip r d default via "$BACKUP_GW" dev "$BACKUP_IF"
ip r a default via "$PRIMARY_GW" dev "$PRIMARY_IF"
fi
else
# Are we using the primary?
if gateway_if "$PRIMARY_IF"
then # Switch to backup
ip r d default via "$PRIMARY_GW" dev "$PRIMARY_IF"
ip r a default via "$BACKUP_GW" dev "$BACKUP_IF"
fi
fi
done

@Ded1er
Copy link

Ded1er commented Apr 14, 2022

Goog Morning, I realize tests, but the system return follow message
/failover.sh: line 29: -I: command not found
/failover.sh: line 34: [: -eq: unary operator expected
What it is?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment