[LARTC] Multiple Link with Nat and linux bw management / routing

[LARTC] Multiple Link with Nat and linux bw management / routing

[Alfredo Giordano]

[-- Attachment #1: Type: text/plain, Size: 2241 bytes --]

Hi folks,

Has been several days I am going throught this but I couldn't make it to work.

this is my current scenario:

E1 pipe 
      |
cisco 3620 with wccp
      |
  switch1 --------- squid transparent server
      |
    eth1
linux bridge with htb bw management per IP
    eth0
      |
  switch2
      |
class C routed network to clients

I want to modify this adding an ADSL connetcion (dynamic IP address) in to the network. I would like to have fail over but not load balancing, I will decide if a single ip gets routed by default gw or to the adsl connection. Beside that I would like to keep the transparent proxy.

Problems I am facing to are:

1. connection routed to adsl connection must be natted the other one not
2. how to manage the upload bw (no problem for download because I can shape on eth0)
3. keep the transparent proxy for both connections.

we are trying two different aproaches:

E1 pipe                  ADSL pipe
   |                                  |
cisco 3620                bb router
   |                                  |
   -----------------------------------
                    |
               switch1
                    |
       linux router with iptables (maybe wccp? or simply port redirection)
                   |
               switch2---squid transparent server
                   |
               class c routed network segment

that leaves out the bw management wich **I NEED** unless I can find an efficient way to mark squid packets with their original source IP.

the other idea:

E1 pipe                  ADSL pipe
   |                                  |
cisco 3620                      |
   |                                  |
  eth1                            eth2(ppp0)
    ----------linux router---------
  eth0                            eth3
     |                                 |
     |                         squid transparent server
     |
class c routed network segment

that has exponential complications and needs to find a machine that can support 4 eth cards without errors.

Any suggestion on the linux and/or the general design? This thing is driving me crazy.

Thanks in advance

Alfredo Giordano



[-- Attachment #2: Type: text/html, Size: 7564 bytes --]