* [Fwd: [LARTC] 1 adsl + 1 sdsl + masq + simultaneous incomming routes]
@ 2001-03-03 3:38 Mike
2001-03-03 4:15 ` [Fwd: [LARTC] 1 adsl + 1 sdsl + masq + simultaneous incomming Jeremy
` (2 more replies)
0 siblings, 3 replies; 4+ messages in thread
From: Mike @ 2001-03-03 3:38 UTC (permalink / raw)
To: lartc
<PRE><A HREF="mailto:phil@optimumdata.com">phil@optimumdata.com</A> wrote:
><i>
</I>><i> On Fri, 2 Mar 2001, Mike Fedyk wrote:
</I>><i>
</I>><i> > I have two dsl links, each with one ip, and a single gateway is assigned the ip
</I>><i> > for each.
</I>><i> >
</I>><i> > ______ ______
</I>><i> > | ADSL | | SDSL |
</I>><i> > |______| |______|
</I>><i> > \ /
</I>><i> > \/
</I>><i> > ___||____
</I>><i> > | gateway |
</I>><i> > |_________|
</I>><i> > ||
</I>><i> > ||
</I>><i> > ||
</I>><i> > _||__
</I>><i> > | web |
</I>><i> > |_____|
</I>><i> >
</I>><i> > OK.
</I>><i> >
</I>><i> > The problem: I am able to have the web server use one or the other dsl, but not
</I>><i> > both at the same time.
</I>><i> >
</I>><i> > If I have web set to sdsl, replies to queries that came from adsl go out on the
</I>><i> > sdsl link. Also since masq is involved, it also responds with the sdsl ip.
</I>><i> >
</I>><i> > How can I have replies go back on the correct internet link? OH, btw, the web
</I>><i> > server is NT, so I won't be able to modify any packets there...
</I>><i>
</I>><i> What I've done is to put two IPs on the server (your web server, in this
</I>><i> case). You would then have the gateway send one IP out via ADSL, and the
</I>><i> out via SDSL.
</I>><i>
</I>><i> There is no way I know of to make that work.
</I>><i>
</I>><i> --
</I>><i> -----------------------------------------------------------------------
</I>><i> Phil Brutsche <A HREF="mailto:phil@optimumdata.com">phil@optimumdata.com</A>
</I>
There has to be a better way. I'm forwarding this to LKML. Maybe they have a
better idea...
I know the kernel keeps a route cache, is there something like a reverse MASQ
feature somewhere. Storing which incoming route + port number and keeping a
dynamic list...
TIA,
Mike
</PRE>
^ permalink raw reply [flat|nested] 4+ messages in thread* [Fwd: [LARTC] 1 adsl + 1 sdsl + masq + simultaneous incomming
2001-03-03 3:38 [Fwd: [LARTC] 1 adsl + 1 sdsl + masq + simultaneous incomming routes] Mike
@ 2001-03-03 4:15 ` Jeremy
2001-03-03 5:46 ` phil
2001-03-03 6:02 ` [Fwd: [LARTC] 1 adsl + 1 sdsl + masq + simultaneous incomming routes] David
2 siblings, 0 replies; 4+ messages in thread
From: Jeremy @ 2001-03-03 4:15 UTC (permalink / raw)
To: lartc
<PRE>Mike Fedyk wrote:
><i> <A HREF="mailto:phil@optimumdata.com">phil@optimumdata.com</A> wrote:
</I>><i> >
</I>><i> > On Fri, 2 Mar 2001, Mike Fedyk wrote:
</I>><i> >
</I>><i> > > I have two dsl links, each with one ip, and a single gateway is assigned the ip
</I>><i> > > for each.
</I>><i> > >
</I>><i> > > ______ ______
</I>><i> > > | ADSL | | SDSL |
</I>><i> > > |______| |______|
</I>><i> > > \ /
</I>><i> > > \/
</I>><i> > > ___||____
</I>><i> > > | gateway |
</I>><i> > > |_________|
</I>><i> > > ||
</I>><i> > > ||
</I>><i> > > ||
</I>><i> > > _||__
</I>><i> > > | web |
</I>><i> > > |_____|
</I>><i> > >
</I>><i> > > OK.
</I>><i> > >
</I>><i> > > The problem: I am able to have the web server use one or the other dsl, but not
</I>><i> > > both at the same time.
</I>><i> > >
</I>><i> > > If I have web set to sdsl, replies to queries that came from adsl go out on the
</I>><i> > > sdsl link. Also since masq is involved, it also responds with the sdsl ip.
</I>><i> > >
</I>><i> > > How can I have replies go back on the correct internet link? OH, btw, the web
</I>><i> > > server is NT, so I won't be able to modify any packets there...
</I>><i> >
</I>><i> > What I've done is to put two IPs on the server (your web server, in this
</I>><i> > case). You would then have the gateway send one IP out via ADSL, and the
</I>><i> > out via SDSL.
</I>><i> >
</I>><i> > There is no way I know of to make that work.
</I>><i> >
</I>><i> > --
</I>><i> > -----------------------------------------------------------------------
</I>><i> > Phil Brutsche <A HREF="mailto:phil@optimumdata.com">phil@optimumdata.com</A>
</I>><i>
</I>><i> There has to be a better way. I'm forwarding this to LKML. Maybe they have a
</I>><i> better idea...
</I>><i>
</I>><i> I know the kernel keeps a route cache, is there something like a reverse MASQ
</I>><i> feature somewhere. Storing which incoming route + port number and keeping a
</I>><i> dynamic list...
</I>
try www.liuxdoc.org search for iproute2 and netfilter.
with 2.4. kernel, you can mark packets *before* they go through routing table,
and the routing tablecan use mark value to choose which route to use,
so if you use set up the NT box with two IP's, your firewall can
mark packets based on destination (on webserver) IP.
think of it like having two default routes...
</PRE>
^ permalink raw reply [flat|nested] 4+ messages in thread
* [Fwd: [LARTC] 1 adsl + 1 sdsl + masq + simultaneous incomming
2001-03-03 3:38 [Fwd: [LARTC] 1 adsl + 1 sdsl + masq + simultaneous incomming routes] Mike
2001-03-03 4:15 ` [Fwd: [LARTC] 1 adsl + 1 sdsl + masq + simultaneous incomming Jeremy
@ 2001-03-03 5:46 ` phil
2001-03-03 6:02 ` [Fwd: [LARTC] 1 adsl + 1 sdsl + masq + simultaneous incomming routes] David
2 siblings, 0 replies; 4+ messages in thread
From: phil @ 2001-03-03 5:46 UTC (permalink / raw)
To: lartc
<PRE>On Fri, 2 Mar 2001, Mike Fedyk wrote:
><i> There has to be a better way.
</I>
It's the one I use; it works and works well.
Asking someone who deals with "network appliance" routers (ie Cisco) might
lead to some ideas. But the Cisco folks I asked recommended the solution
I told you about. You might have better luck asking someone else.
><i> I'm forwarding this to LKML. Maybe they have a better idea...
</I>
<A HREF="mailto:netdev@oss.sgi.com">netdev@oss.sgi.com</A> (or something like that) is actually a better place
><i> I know the kernel keeps a route cache, is there something like a reverse MASQ
</I>><i> feature somewhere. Storing which incoming route + port number and keeping a
</I>><i> dynamic list...
</I>
--
-----------------------------------------------------------------------
Phil Brutsche <A HREF="mailto:phil@optimumdata.com">phil@optimumdata.com</A>
</PRE>
^ permalink raw reply [flat|nested] 4+ messages in thread
* [Fwd: [LARTC] 1 adsl + 1 sdsl + masq + simultaneous incomming routes]
2001-03-03 3:38 [Fwd: [LARTC] 1 adsl + 1 sdsl + masq + simultaneous incomming routes] Mike
2001-03-03 4:15 ` [Fwd: [LARTC] 1 adsl + 1 sdsl + masq + simultaneous incomming Jeremy
2001-03-03 5:46 ` phil
@ 2001-03-03 6:02 ` David
2 siblings, 0 replies; 4+ messages in thread
From: David @ 2001-03-03 6:02 UTC (permalink / raw)
To: lartc
<PRE>><i>
</I>><i>
</I>>>><i> The problem: I am able to have the web server use one or the other dsl, but not
</I>>>><i> both at the same time.
</I>>>><i>
</I>>>><i> If I have web set to sdsl, replies to queries that came from adsl go out on the
</I>>>><i> sdsl link. Also since masq is involved, it also responds with the sdsl ip.
</I>>>><i>
</I>>>><i> How can I have replies go back on the correct internet link? OH, btw, the web
</I>>>><i> server is NT, so I won't be able to modify any packets there...
</I>>><i>
</I>>><i> What I've done is to put two IPs on the server (your web server, in this
</I>>><i> case). You would then have the gateway send one IP out via ADSL, and the
</I>>><i> out via SDSL.
</I>><i>
</I>><i> There has to be a better way. I'm forwarding this to LKML. Maybe they have a
</I>><i> better idea...
</I>><i>
</I>><i> I know the kernel keeps a route cache, is there something like a reverse MASQ
</I>><i> feature somewhere. Storing which incoming route + port number and keeping a
</I>><i> dynamic list...
</I>
It all looks very easy if the web server has two IPs. Making it simple,
use the following example after modifying the necessary information:
Web server public IPs: 99.0.0.5/32(ADSL), 100.0.0.5/32(SDSL), and set
default via 10.0.0.1
Gateway: 10.0.0.1 on all interfaces, no default unless you choose to
have one
ADSL: 99.0.0.1/24, SDSL: 100.0.0.1/24
Routing setup on web server is to point to the default gateway, nothing
special needed.
Routing on *DSL isn't under your control.
All control is handled on the gateway. (web/eth2, SDSL/eth1, ADSL/eth0)
Gateway:
(establish interfaces)
ip a a 10.0.0.1/32 brd + dev eth0; ip link set eth0 up
ip a a 10.0.0.1/32 brd + dev eth1; ip link set eth1 up
ip a a 10.0.0.1/32 brd + dev eth2; ip link set eth2 up
(add routing for the web server IPs - inbound traffic)
ip route add 99.0.0.5 dev eth2
ip route add 100.0.0.5 dev eth2
(make packet matching rules, tie them to given tables)
ip rule add from 99.0.0.5/32 to 0.0.0.0/0 table 99 prio 99
ip rule add from 100.0.0.5/32 to 0.0.0.0/0 table 100 prio 100
(add the routing based on the table - outbound traffic)
ip route add via 99.0.0.1 table 99 dev eth0 onlink
ip route add via 100.0.0.1 table 100 dev eth1 onlink
This is off the top of my head but it should work fine.
Of course if the *DSL arrives on the gateway via a hub, simply combine
the interfaces as appropriate.
-d
p.s. those in the know, feel free to correct me
</PRE>
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2001-03-03 6:02 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2001-03-03 3:38 [Fwd: [LARTC] 1 adsl + 1 sdsl + masq + simultaneous incomming routes] Mike
2001-03-03 4:15 ` [Fwd: [LARTC] 1 adsl + 1 sdsl + masq + simultaneous incomming Jeremy
2001-03-03 5:46 ` phil
2001-03-03 6:02 ` [Fwd: [LARTC] 1 adsl + 1 sdsl + masq + simultaneous incomming routes] David
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.