New
-R/--rule-priority PRIO: sets the base priority for new IP rules (default 10000, stepping 10 per rule). Rule priority is a shared namespace coordinated with VPNs, firewall marks, cloud tooling, and site conventions, so the right base varies by environment. Validated to 1-32765; use the same value on every run of a given system.
Behavior changes
- Persistence follows the priorities actually in effect. Persisted configs (networkd drop-ins, netplan, NM dispatcher, ifupdown) now carry the priority of each rule as it exists in the kernel or in this run's plan, per source IP, instead of recomputing from the default base. A later run without the flag cannot renumber persisted files out from under a configured system, and multi-IP interfaces now persist each address's real priority.
- Hard ceiling below the main table lookup. The planner refuses to allocate a rule priority above 32765 -- a rule at or after
from all lookup main(32766) never fires while main holds a default route -- logging an error and skipping instead of writing dead configuration.
Release on top of v1.4.0.