There is a wAP R lte and a linux server. There is a vxlan over wireguard in between. They have a connection to different ISPs. The goal is to be able to access wAP R from any IP address of the ISP.
An additional table has been created on the wAP R lte, the default gateway in the table has been configured and connection marking and routing have been configured. Default gateway is configured in the main table. Packets go nowhere:
/routing table add disabled=no fib name=srv
/ip route add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=10.10.10.10 routing-table=srv scope=30 suppress-hw-offload=no target-scope=20
/ip firewall mangle add action=mark-connection chain=prerouting connection-state=new in-interface=vxlan1 new-connection-mark=vxlan passthrough=yes src-address-list=!BOGONS
/ip firewall mangle add action=mark-routing chain=output connection-mark=vxlan new-routing-mark=vpn passthrough=yno
The sniffer on the wAP R shows that the packet is sent to the vxlan, but it doesn’t reach the ubuntu on which tcpdump was run for debugging. However, if you create a route rule and disable traffic marking, everything works.
/route/rule/add action=lookup src-address=0.0.0.0/0 table=vpn
If create GRE tunnel between devices, then also marking works and response packets are not lost. And through vxlan routing mark does not work.
This was also checked between two mikrotiks (VXLAN). mangle mark routing also sends packets to unknown destination.