Re: route-to round-robin using single interface?

Article View: bit.listserv.openbsd-pf

Article #152

Back to bit.listserv.openbsd-pf Previous Next

#152

From: Daniel Hartmeier
Date: Tue, 15 Jan 2013 12:32

33 lines
2633 bytes

On Mon, Jan 14, 2013 at 03:30:21PM +0100, Johan Helsingius wrote:

> I have a small network, connected by 2 ADSL connections, and
> want to load-share the connections. All examples of route-to
> round-robin that I have seen have used 2 separate interfaces,
> but as both my ADSL modems are on the same "no-mans-land"
> network, I have been (so far unsuccessfully) trying to do
> something like this:
> 
> pass in on $int_if from $int_net \
>       route-to { ($ext_if $isp1_gw), ($ext_if $isp2_gw) } \
>       round-robin sticky-address
> 
> Is that supposed to work, or does route-to round-robin only
> work with 2 separate interfaces?

AFAIK, it should work.

tcpdump with -e on $ext_if and check the destination MAC addresses.

Can you ping $isp1_gw and $isp2_gw and arp -sn is showing two
different entries for them?

What is the problem? All packets always go to $isp1_gw's MAC?
Or the sticky-address source tracking isn't working?

Are you using multiple clients on $int_net? If not, what do you expect
the sticky-address to do?

Have you tried adding "keep state(soure-track global)" and
"set timeout source-track" and checked with pfctl -sS?

Daniel

Technical Details

Message-ID: <20130115120107.GD2410@insomnia.benzedrine.cx>

Path:

arc1-ca.pugleaf.net!o9ni8434wio.1!nntp.google.com!feeder1.cambriumusenet.nl!feed.tweaknews.nl!193.141.40.65.MISMATCH!npeer.de.kpn-eurorings.net!npeer-ng0.de.kpn-eurorings.net!xlned.com!feeder1.xlned.com!newsfeed.xs4all.nl!newsfeed2.news.xs4all.nl!xs4all!border4.nntp.ams.giganews.com!border2.nntp.ams.giganews.com!border2.nntp.dca.giganews.com!nrc-news.nrc.ca!border3.nntp.dca.giganews.com!border1.nntp.dca.giganews.com!nntp.giganews.com!novia!news-out.readnews.com!news-xxxfer.readnews.com!nx02.iad01.newshosting.com!newshosting.com!69.16.185.21.MISMATCH!npeer03.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn

References: <50F4167D.1080403@Julf.com>

Show Full Headers

Complete Article Headers

X-Google-Thread: bffa70e3,3bf4827c7d36c008
X-Google-Attributes: gidbffa70e3,public,usenet
X-Google-NewGroupId: yes
X-Google-Language: ENGLISH,ASCII-7-bit
X-Received: by 10.180.24.130 with SMTP id u2mr1703928wif.6.1358655664501;
        Sat, 19 Jan 2013 20:21:04 -0800 (PST)
Path: arc1-ca.pugleaf.net!o9ni8434wio.1!nntp.google.com!feeder1.cambriumusenet.nl!feed.tweaknews.nl!193.141.40.65.MISMATCH!npeer.de.kpn-eurorings.net!npeer-ng0.de.kpn-eurorings.net!xlned.com!feeder1.xlned.com!newsfeed.xs4all.nl!newsfeed2.news.xs4all.nl!xs4all!border4.nntp.ams.giganews.com!border2.nntp.ams.giganews.com!border2.nntp.dca.giganews.com!nrc-news.nrc.ca!border3.nntp.dca.giganews.com!border1.nntp.dca.giganews.com!nntp.giganews.com!novia!news-out.readnews.com!news-xxxfer.readnews.com!nx02.iad01.newshosting.com!newshosting.com!69.16.185.21.MISMATCH!npeer03.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn
From: daniel@benzedrine.cx (Daniel Hartmeier)
Newsgroups: bit.listserv.openbsd-pf
Subject: Re: route-to round-robin using single interface?
Date: 15 Jan 2013 04:32:56 -0800
Organization: None
Lines: 33
Message-ID: <20130115120107.GD2410@insomnia.benzedrine.cx>
References: <50F4167D.1080403@Julf.com>
NNTP-Posting-Host: localhost.newsguy.com
Mime-Version: 1.0
NNTP-Posting-Date: 15 Jan 2013 12:32:57 GMT
X-Received-Bytes: 1765
Content-Type: text/plain; charset=us-ascii

Reply to Parent Message