Freigeben über

Do we support "Policy based routing" on Windows Server operating systems?

  • Artikel

Hi there,

In one of the past cases, one of our customers wanted to know if we supported policy based routing on Windows 2003 or later OSes. First of all, it might be useful to clarify what "policy based routing" means in this context. Let's take the following as an example:

"A server is running as a router and have 3 network interfaces. When the server receives a packet from a specific host (let’s say running at a certain IP address) from one of its interfaces (say interface1), we would like the server to always route that host’s packets through interface2 without consulting the routing table. (The criteria might be different for different scenarios such as "all packets with a destination of TCP port 80 to be sent out from interface3 etc)"

This kind of advanced routing decisions are generally supported by network hardware vendors like Cisco. For example, by using route-map configuration in Cisco IOS, you can affect the conventional routing decisions made by looking up the routing table. You can find more information on that at the following link:

https://www.cisco.com/en/US/docs/ios/12_0/qos/configuration/guide/qcpolicy.html Configuring Policy-Based Routing

And the answer to the original question is: No, we don't support policy based routing on Windows server OSes since this is generally a feature that would be needed on hardware routers whose main purpose is to do packet routing.

Hope this helps

Thanks,
Murat

Comments

  • Anonymous
    January 01, 2003
    Excuse me, couldn't you do "Policy Based Routing" by using the decision capabilities of IPSec rules and terminate with a tunnel to an interface? I know its for VPN and secure tunneling but a lot of the configs look like they could be used for Policy Base Routing.

  • Anonymous
    March 04, 2012
    Thanks ---

  • Anonymous
    August 28, 2012
    Do you know of a workaround without messing with the router (I don't have access to it)? I'm trying to do this on Windows 2008 Server.

  • Anonymous
    October 23, 2015
    The is an appalling state of affairs in 2015. The Linux Kernel has supported policy routing since v2.2. A slightly more sensible thing for Windows to add would be VRF support, a bit like Cisco IOS or NXOS.

  • Anonymous
    July 24, 2017
    This logic is rather weird. 1. Since Linux kernel does perform policy routing it follows that you intentionally omit some functional in favor of your competitor as well.2. Hardware routers do packet routing. Some of them are also firewalls. Why to implement these capabilities in your OSes? Why to support multiple network interfaces onboard?..