Below is the code I used to route all TCP traffic to the outside to port 1080.
root@LEDE:~# iptables -t nat -N SSREDIR
root@LEDE:~# iptables -t nat -A SSREDIR -d 1.2.3.4 -j RETURN #shadowsocks server
root@LEDE:~# iptables -t nat -A SSREDIR -d 127.0.0.0/8 -j RETURN
root@LEDE:~# iptables -t nat -A SSREDIR -d 192.168.1.0/24 -j RETURN
root@LEDE:~# iptables -t nat -A SSREDIR -d 192.168.11.0/24 -j RETURN
root@LEDE:~# iptables -t nat -A SSREDIR -p tcp -j REDIRECT --to-ports 1080
root@LEDE:~# iptables -t nat -A PREROUTING -p tcp -j SSREDIR
My question is how I can route all UDP/IMCP packages to my VPN(tun0) interface? Thanks.