From: "Usuário do Sistema" <maiconlp@ig.com.br>
To: Andrew Beverley <andy@andybev.com>
Cc: netfilter@vger.kernel.org
Subject: Re: Load Balance
Date: Mon, 16 May 2011 17:24:29 -0300 [thread overview]
Message-ID: <BANLkTim4bnzaeD9yny7uV6fBfB=k-XAc6A@mail.gmail.com> (raw)
In-Reply-To: <1305480225.1708.2.camel@andybev>
Thank you Andy for your Return.
I haven't made available in my environment product yet.
well.... the link made available for you shows how to do load balance
with connmark and statistic match module and it doesn't regard global
equalize.
so...I wonder there is diferent between them ?
with global equalize is very easy I only insert one line inside of the
script and all it's work! at least in my test environment it's
working.
I want make an test as your how to but I'm using CentOS 5.6 and
doesn't has libxt_statistic.so module because iptables version is
1.3.x
thank
Em 15 de maio de 2011 14:23, Andrew Beverley <andy@andybev.com> escreveu:
> On Sun, 2011-04-17 at 20:22 -0300, Usuário do Sistema wrote:
>> Hello everyone, I'm deploy an test environment with load Balance in my
>> Firewall using equalize as follow below
>>
>>
>> I have two ISPs and one Inside network.
>>
>> creating the load balance:
>>
>> ip route add default scope global equalize nexthop via 200.247.209.65
>> weight 1 nexthop via 201.72.12.1 weight 1
>>
>> Zeroing the ip_filter
>>
>> for eee in /proc/sys/net/ipv4/conf/*/rp_filter; do
>> echo 0 > $eee
>> done
>>
>> creating more one table
>>
>> ip route add default via 201.72.12.1 table telemar
>>
>>
>> it's working in my environment. but I haven't done available in my
>> production environment.
>>
>
> Do you mean it doesn't work in your production environment?
>
>> my question is: there is more parameter ,which, I have to set ? for
>> exemplo, timers.
>>
>
> If you are using 2 completely separate ISPs, then you will need to do
> more than just provide equal-weighted gateways. You will need to send
> the packets for each connection over the same ISP. The website below
> gives more information:
>
> http://www.sysresccd.org/Sysresccd-networking_en_Iptables-and-netfilter-load-balancing-using-connmark
>
> Andy
>
>
>
next prev parent reply other threads:[~2011-05-16 20:24 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2011-04-17 23:22 Load Balance Usuário do Sistema
2011-05-15 17:23 ` Andrew Beverley
2011-05-16 20:24 ` Usuário do Sistema [this message]
2011-05-16 21:38 ` Andrew Beverley
2011-05-16 22:42 ` Usuário do Sistema
2011-05-17 0:45 ` Grant Taylor
2011-05-17 17:00 ` Usuário do Sistema
2011-05-17 18:07 ` Grant Taylor
2011-05-17 20:06 ` Usuário do Sistema
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='BANLkTim4bnzaeD9yny7uV6fBfB=k-XAc6A@mail.gmail.com' \
--to=maiconlp@ig.com.br \
--cc=andy@andybev.com \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).