Re: trouble setting default route for load-balancing routing tables

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> > I assume that you have no need to keep the same connection stream on the
> > same interface? If you do, you can use netfilter marks (and netfilter
> > connection tracking) to do the load balancing instead, as described on
> > this page:
> 
> I may have to do that, but from what I've read, rule like the ones I
>  posted above are supposed to be evaluated before the default
>  "nexthopping" route in table main, because of the rules numbering, and
>  that's the way my rules appear:

Correct, they will be evaluated first.

What I meant was that if you have a stream of packets all to do with one
connection (such as an FTP download) and you want all the packets for
that connection to go over the same link, then you will need to use
netfilter connection tracking for your iproute rules.

If your internet links are independent then you will need to do this in
order to not break connection streams.

> My script has to reconfigure the firewall when an uplink fails and
>  again when it recovers connectivity.  I used a program called lsm
>  (link status monitor, http://lsm.foobar.fi/) for this.

Thanks for that. I wish I'd known that earlier, as I have just written
my own basic version!

>   I think this
>  will be useful to others.  When I get it all working I'll post it on
>  my website and post here.

I've been working on a project for something similar. I'll also post it
to this list shortly for the benefit of others.

Andy


--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux