Split Routing over WAN and VPN [gui bug]

[gwaitsi]

I have OpenVPN setup and router all traffic via ExpressVPN.
I discovered that virtually no sites in China are available to clients outside China going via VPN.

I made a China alias and started to add the network addresses that i recognised was being used and route via the WAN and it all works good.
To add all China ip networks though is like 3000 networks.

Wont this have a performance impact on overall routing if it has to check the alias for each packet? is there a better way to deal with this?

[viragomann]

@gwaitsi:

Wont this have a performance impact on overall routing if it has to check the alias for each packet?

That won't be measurably on most hardware.
Only the table will occupy some kB of memory.

@gwaitsi:

is there a better way to deal with this?

Yes, search for a China IP list in the internet and import it.

[gwaitsi]

I have 4Gb memory and only using 6% at the moment and the CPU is Intel(R) Celeron(R) CPU J1900 @ 1.99GHz, so I guess this has plenty of grunt then.

I have the list and net masks, but can't see how you import it.
Can you give me a hint there please

[viragomann]

Firewall > Aliases > IP
Below the aliases list there is an Import button at the right side.

[gwaitsi]

Jesus….now i feel stupid...RTFM....

Thanks man, took me 5min to get the 2006 China networks in.....  didn't notice the import button before, but see the docs.....

[gwaitsi]

what a bumber…... imported 2006 networks, have discovered i need to add a new one but there is a gui bug.

Have tried to add via Edge and Firefox on Windows and Linux, but experience the following;

• page load time is long
• when adding the network, is takes a while to respond and firefox gives "a webserver is slowing down your browser"
• page refreshes and the new network is not added

The work around was to add the new address to the import list in excel, and create a new alias from scratch.