> -----Original Message----- > From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf > Of Janne Johansson > Sent: Tuesday, September 29, 2009 6:14 AM > To: misc > Subject: Re: Carp basics > > Siju George wrote: > > Is it possible for me to make both fw1 and fw2 listen on ip address > > 172.17.1.0 and load balance connections through both ISPs? > > And also make a fail over set up so that when either ISP1 or ISP2 is > > not functioning all hosts in the network going through the other. > > http://www.openbsd.org/faq/faq6.html#Multipath > might help.
Some web sites (e.g. YouTube) don't seem to work well with NAT based load-balancing. Check out sticky-address options in PF, which might help that. Also, to achieve reliable fail-over look at using ifstated. Check the mail archive for examples. Finally, 172.17.1.0 isn't a legit address to listen on. -Steve S.