Re: PF Outbound traffic Load Balancing over multiple tun/openvpn interfaces/tunnels

2021-09-28 Thread Andrew Lemin
Hi. Sorry for extremely slow reply! Did you add the return routes for your internal subnets into each of the per-tun rdomains? To test your tunnels are setup correctly; Once you have the external interface in rdomain 0, and each VPN instance's tun interface is bound to different rdomains etc, you

Re: PF Outbound traffic Load Balancing over multiple tun/openvpn interfaces/tunnels

2019-05-07 Thread mike42
Trying to replicate same setup with pairs and different rdomains for each tun and also external interface, after a packet goes through pair interfaces it's just disapears. Any ideas? routing in rdomain is set like: route -T add default tun route -T add -- Sent from:

Re: PF Outbound traffic Load Balancing over multiple tun/openvpn interfaces/tunnels

2018-11-28 Thread Andy Lemin
Hi, So for completeness, I did some more testing with your suggestions. First I tried using different nexthop’s in each of the interface-nexthop pairs in the route-to pool (as the next hop doesn’t really matter with p2p interfaces). And it did start to work! :) But after some more testing it

Re: PF Outbound traffic Load Balancing over multiple tun/openvpn interfaces/tunnels

2018-11-27 Thread Tom Smyth
Sorry the "here" I was referring to earlier was "here" as shown below https://lab.rickauer.com/post/2017/07/16/OpenBSD-rtables-and-rdomains > Howdy... > starting Openvpn in different rdomains works pretty well for us > > a crude way of doing that ... is to add the following line to the >

Re: PF Outbound traffic Load Balancing over multiple tun/openvpn interfaces/tunnels

2018-11-27 Thread Tom Smyth
Howdy... starting Openvpn in different rdomains works pretty well for us a crude way of doing that ... is to add the following line to the bottom of your tun interface... (starting openvpn in rdomain2 ) !/sbin/route -T 2 exec /usr/local/sbin/openvpn --config /etc/openvpn2.conf & /usr/bin/false

Re: PF Outbound traffic Load Balancing over multiple tun/openvpn interfaces/tunnels

2018-11-27 Thread Philip Higgins
At a guess, route-to is confused by the same ip, but I haven't looked at the internals. Maybe try adding pair interfaces (with different addresses) to each rdomain, and you can use route-to to select between them. You already have default route set in each rdomain, so it will find its way from

Re: PF Outbound traffic Load Balancing over multiple tun/openvpn interfaces/tunnels

2018-11-27 Thread Andrew Lemin
Hi, So using the information Stuart and Andreas provided, I have been testing this (load balancing across multiple VPN servers to improve bandwidth). And I have multiple VPNs working properly within there own rdomains. * However 'route-to' is not load balancing with rdomains :( I have not been

Re: PF Outbound traffic Load Balancing over multiple tun/openvpn interfaces/tunnels

2018-09-12 Thread Stuart Henderson
On 2018-09-11, Andrew Lemin wrote: > Hi list, > > I use an OpenVPN based internet access service (like NordVPN, AirVPN etc). > > The issue with these public VPN services, is the VPN servers are always > congested. The most I’ll get is maybe 10Mbits through one server. > > Local connection is a

Re: PF Outbound traffic Load Balancing over multiple tun/openvpn interfaces/tunnels

2018-09-12 Thread Andy Lemin
Hi Andreas, Thanks for your reply. Sorry I should have been more clear. I know that rdomains are the correct method with overlapping addressing. The challenge is that I cannot figure out how to get openvpn to initialise it’s resulting tunX interface directly into the correct rdomain? You

Re: PF Outbound traffic Load Balancing over multiple tun/openvpn interfaces/tunnels

2018-09-11 Thread Andreas Krüger
Maybe rdomains? > Den 11. sep. 2018 kl. 15.59 skrev Andrew Lemin : > > Hi list, > > I use an OpenVPN based internet access service (like NordVPN, AirVPN etc). > > The issue with these public VPN services, is the VPN servers are always > congested. The most I’ll get is maybe 10Mbits through

PF Outbound traffic Load Balancing over multiple tun/openvpn interfaces/tunnels

2018-09-11 Thread Andrew Lemin
Hi list, I use an OpenVPN based internet access service (like NordVPN, AirVPN etc). The issue with these public VPN services, is the VPN servers are always congested. The most I’ll get is maybe 10Mbits through one server. Local connection is a few hundred mbps.. So I had the idea of running