Re: [pfSense Support] Load Balancer Interfaces

2009-08-26 Thread David Burgess
On Wed, Aug 26, 2009 at 7:42 AM, Jesse Vollmar vollm...@gmail.com wrote: It seems like this is related to that OPT interface not having the gateway specified on it. That interface is however working and sending traffic out to my ISP's gateway. At the risk of looking like the N00b that I am,

[pfSense Support] Load Balancer Interfaces

2009-08-26 Thread Jesse Vollmar
Hello, I recently had to make some changes to one of my OPT interfaces and now I cannot re-setup the load balancing. I ended up not setting a gateway on that interface (which is used for a cable Internet connection) to get it to work with my ISP. Before making any changes, I deleted out my load

Re: [pfSense Support] Load Balancer Interfaces

2009-08-26 Thread Jesse Vollmar
On Wed, Aug 26, 2009 at 10:39 AM, David Burgess apt@gmail.com wrote: At the risk of looking like the N00b that I am, I don't see how pfsense can send traffic out on an interface that has no gateway. Respond, yes; initiate, no. Can we have a look at your routing table? db The route for

Re: [pfSense Support] Load Balancer Interfaces

2009-08-26 Thread David Burgess
On Wed, Aug 26, 2009 at 8:57 AM, Jesse Vollmar vollm...@gmail.com wrote: The route for that OPT1 interface is showing up it is em2. $ netstat -nr Routing tables Internet: DestinationGatewayFlagsRefs Use Netif Expire default67.38.60.77UGS

Re: [pfSense Support] Load Balancer Interfaces

2009-08-26 Thread Jesse Vollmar
On Wed, Aug 26, 2009 at 11:19 AM, David Burgessapt@gmail.com wrote: As expected, you have no gateway on em2. pfsense is able to route packets to any host on that network, which means it can reply to any incoming packet, or contact any machine on that network, but any traffic that doesn't

Re: [pfSense Support] Load Balancer Interfaces

2009-08-26 Thread David Burgess
On Wed, Aug 26, 2009 at 9:24 AM, Jesse Vollmar vollm...@gmail.com wrote: On Wed, Aug 26, 2009 at 11:19 AM, David Burgessapt@gmail.com wrote: I have entered the ISP's gateway (They actually have two due to us using multiple subnets) and when I do, pfsense can only ping that address.

[pfSense Support] Load Balancer Using TCP

2009-04-01 Thread Nathan Eisenberg
Hello, I have a load balancer with two web servers behind it. The web servers are to be monitored via ICMP. However, the servers frequently flap, and I see this message in the load balancer log: Apr 1 21:06:57 slbd[56826]: TCP poll succeeded for 192.168.20.61:80, marking service UP Apr 1

Re: [pfSense Support] Load balancer

2009-02-08 Thread Chris Buechler
On Sat, Feb 7, 2009 at 10:47 AM, Tim Nelson tnel...@rockbochs.com wrote: I have to admit it took me a bit to find it as well. For whatever reason, when looking by category, it assumes you want to edit the category. I simply had to change the url from

RE: [pfSense Support] Load balancer

2009-02-07 Thread Hiren Joshi
: [pfSense Support] Load balancer Hiren Joshi wrote: Hello all, I'm using pfsense to firewall at the moment but pass all the http traffic to an internal load balancer (nginx). My question is, would it be possible to replace nginx with pfsense and how would the two compare in terms

Re: [pfSense Support] Load balancer

2009-02-07 Thread Tim Nelson
A good start is here: http://doc.pfsense.org/index.php?title=Category:Load_balancing Tim Nelson Systems/Network Support Rockbochs Inc. (218)727-4332 x105 - Hiren Joshi j...@moonfruit.com wrote: Where can I find details about the pfsense balancer? Things like how a request is handled

RE: [pfSense Support] Load balancer

2009-02-07 Thread Hiren Joshi
Thanks for the quick reply... I just couldn't find it on the wiki! -Original Message- From: Tim Nelson [mailto:tnel...@rockbochs.com] Sent: 07 February 2009 15:32 To: support@pfsense.com Subject: Re: [pfSense Support] Load balancer A good start is here: http

Re: [pfSense Support] Load balancer

2009-02-07 Thread Tim Nelson
I have to admit it took me a bit to find it as well. For whatever reason, when looking by category, it assumes you want to edit the category. I simply had to change the url from http://doc.pfsense.org/index.php?title=Category:Load_balancingaction=edit to

[pfSense Support] Load balancer

2009-02-06 Thread Hiren Joshi
Hello all, I'm using pfsense to firewall at the moment but pass all the http traffic to an internal load balancer (nginx). My question is, would it be possible to replace nginx with pfsense and how would the two compare in terms of performance? Many thanks, Josh.

Re: [pfSense Support] Load balancer

2009-02-06 Thread Gary Buckmaster
Hiren Joshi wrote: Hello all, I'm using pfsense to firewall at the moment but pass all the http traffic to an internal load balancer (nginx). My question is, would it be possible to replace nginx with pfsense and how would the two compare in terms of performance? Many thanks, Josh. We

[pfSense Support] Load Balancer Question

2008-02-19 Thread Joel Robison
Hi ALL! I have a few questions about the load balancer function: 1. Can I round-robin udp packets? for instance I would like to setup and internal(LAN side) VIP that will be in front of 2 dns servers. 2. Will it allow me to load balance internally? i.e not a on the WAN side but on the

Re: [pfSense Support] Load Balancer Question

2008-02-19 Thread Gary Buckmaster
The documentation site is very helpful in this regard: http://devwiki.pfsense.org/OutgoingLoadBalancing or http://devwiki.pfsense.org/IncomingLoadBalancing choose your poison. Joel Robison wrote: Hi ALL! I have a few questions about the load balancer function: 1. Can I round-robin udp

Re: [pfSense Support] Load Balancer + Failover

2007-10-11 Thread Lee Hetherington
Hi Bill, Same here, I even have the same thing working on 1.1 PFsense for another customer. Is there a way to down grade from 1.2 RC2 to 1.1? Thanks, Lee Bill Marquette wrote: Strange, other than the sticky address (which should be more a nuisance than anything) not getting set on the

Re: [pfSense Support] Load Balancer + Failover

2007-10-11 Thread Chris Buechler
Lee Hetherington wrote: Hi Bill, Same here, I even have the same thing working on 1.1 PFsense for another customer. Is there a way to down grade from 1.2 RC2 to 1.1? It would be MUCH better to help us figure out if there is indeed a regression in this from 1.2 to 1.0.1. Going back to 1.0.1

Re: [pfSense Support] Load Balancer + Failover

2007-10-11 Thread Lee Hetherington
Hi Chris, Its two different systems, in the 1.1 system I have the hosts behind the balancer being natted by the pfsense box, where as on the 1.2 they are direct routed, and natted upstream using a PIX 515e. Ive tried tcp dump on the secondary as discussed with Bill, I can see the packets

Re: [pfSense Support] Load Balancer + Failover

2007-10-10 Thread Lee Hetherington
Hi Bill, The config was sync'd ok, I can see it on both boxes. Below is a ps -ax from the secondary machine: # ps -ax |grep slb 60083 ?? Ss 0:00.51 /usr/local/sbin/slbd -c/var/etc/slbd.conf -r5000 65097 p0 RV 0:00.00 grep slb (tcsh) Looks to me like its running? I tried editing

Re: [pfSense Support] Load Balancer + Failover

2007-10-10 Thread Bill Marquette
Hmm, what does the output of pfctl -sn -aslb look like on both boxes? The other obvious question is, are the virtual addresses that front end your load balance pool CARP addresses? If they aren't, then the secondary won't take them over on failover regardless of the load balance config. --Bill

Re: [pfSense Support] Load Balancer + Failover

2007-10-10 Thread Lee Hetherington
Hi Bill, All is carp, when the primary is off, I can ping the address still. Primary: # pfctl -sn -aslb rdr inet proto tcp from any to 10.2.48.1 port = smtp - { 10.5.49.1, 10.5.49.2 } port 25 round-robin sticky-address rdr inet proto tcp from any to 10.2.48.1 port = http - { 10.5.49.1,

Re: [pfSense Support] Load Balancer + Failover

2007-10-10 Thread Bill Marquette
Strange, other than the sticky address (which should be more a nuisance than anything) not getting set on the secondary, I'm not seeing anything obvious that would prevent the connection from working. The only other thing I can think to look at is whether the rulesets (/tmp/rules.debug) are the

[pfSense Support] Load Balancer + Failover

2007-10-09 Thread pfsense
Hi There, Im using 1.2 RC2 on Intel boxes. I have the load balancer setup and working, the two machines are syncing settings and the carp is working properly. However, if I reboot the primary firewall the secondary takes over pings, but the load balancing doesnt work again until the primary

Re: [pfSense Support] Load Balancer + Failover

2007-10-09 Thread Bill Marquette
Inbound or outbound load balancing? --Bill On 10/9/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Hi There, Im using 1.2 RC2 on Intel boxes. I have the load balancer setup and working, the two machines are syncing settings and the carp is working properly. However, if I reboot the

Re: [pfSense Support] Load Balancer + Failover

2007-10-09 Thread pfsense
Hi Bill, Sorry, inbound... we have 2x Web Servers behind the PFsense boxes so we are load balancing 443 and 80 TCP Lee On Tue, 9 Oct 2007 08:47:27 -0500, Bill Marquette [EMAIL PROTECTED] wrote: Inbound or outbound load balancing? --Bill On 10/9/07, [EMAIL PROTECTED] [EMAIL PROTECTED]

Re: [pfSense Support] Load Balancer + Failover

2007-10-09 Thread Bill Marquette
Can you confirm that the load balancer config sync'd over to the secondary? Also, assuming it did, can you do a 'ps -ax |grep slb' from the shell? I suspect it never started slbd after sync (as an interim workaround, you could try going to the load balancer page on the secondary and

[pfSense Support] load balancer problems

2007-06-07 Thread Dave Cabot
I'm trying to get the load balancer to work, but it causes the system to do a hard lockup. Hardware Compaq SFF P2 (400Mhz, 256MB ram) I'm using the internal ethernet card plus two in the PCI slots. They come up as fxp0, fxp1, fxp2. They are all on IRQ 11. I know there's documentation

Re: [pfSense Support] load balancer problems

2007-06-07 Thread Jaye Mathisen
Try one of the 1.2.1 beta's. Many issues resolved, all around better product. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: [pfSense Support] load balancer problems

2007-06-07 Thread Scott Ullrich
1. Upgrade to 1.2-BETA-1 2. See http://doc.pfsense.org/index.php/MultiWanVersion1.2 On 6/7/07, Dave Cabot [EMAIL PROTECTED] wrote: I'm trying to get the load balancer to work, but it causes the system to do a hard lockup. Hardware Compaq SFF P2 (400Mhz, 256MB ram) I'm using the internal

[pfSense Support] Load Balancer Behaviour

2007-04-24 Thread Quirino Santilli
Scott (pfsense support), please help me, when adding a load balancer pool I can't see the interface name (WAN for example) preceding the |(Wan check ip). This is a fresh install with the latest snapshot and I can't figure hot why is going in this sense for me. I tried recreating the pools, but

RE: [pfSense Support] Load Balancer Behaviour

2007-04-24 Thread Holger Bauer
Message- From: Quirino Santilli [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 24, 2007 10:32 AM To: support@pfsense.com Subject: [pfSense Support] Load Balancer Behaviour Scott (pfsense support), please help me, when adding a load balancer pool I can't see the interface name (WAN

[pfSense Support] R: [pfSense Support] Load Balancer Behaviour?

2007-04-23 Thread Quirino Santilli
It doesn't worked for me. Any ideas? r3N0oV4 -Messaggio originale- Da: Scott Ullrich [mailto:[EMAIL PROTECTED] Inviato: venerdì 20 aprile 2007 18.55 A: support@pfsense.com Oggetto: Re: [pfSense Support] R: [pfSense Support] Load Balancer Behaviour? Remove the members of the pool

[pfSense Support] R: [pfSense Support] Load Balancer Behaviour?

2007-04-20 Thread Quirino Santilli
-Messaggio originale- Da: Quirino Santilli Inviato: venerdì 20 aprile 2007 10.15 A: 'support@pfsense.com' Oggetto: R: [pfSense Support] Load Balancer Behaviour? Ok, I updated and the issue solved, but now when adding a Load Balancer Pool in the list field I see something strange: on my howto

[pfSense Support] R: [pfSense Support] Load Balancer Behaviour?

2007-04-20 Thread Quirino Santilli
r3N0oV4 -Messaggio originale- Da: Scott Ullrich [mailto:[EMAIL PROTECTED] Inviato: giovedì 19 aprile 2007 19.35 A: support@pfsense.com Oggetto: Re: [pfSense Support] Load Balancer Behaviour? On 4/19/07, Quirino Santilli [EMAIL PROTECTED] wrote: I was finally configuring pfSense

Re: [pfSense Support] R: [pfSense Support] Load Balancer Behaviour?

2007-04-20 Thread Scott Ullrich
problem, It really doesn't fetch the interfaces when adding a Load Balancer Pool. 10x in advance. r3N0oV4 -Messaggio originale- Da: Quirino Santilli Inviato: venerdì 20 aprile 2007 10.15 A: 'support@pfsense.com' Oggetto: R: [pfSense Support] Load Balancer Behaviour? Ok, I updated

Re: [pfSense Support] Load Balancer Behaviour?

2007-04-19 Thread Scott Ullrich
On 4/19/07, Quirino Santilli [EMAIL PROTECTED] wrote: I was finally configuring pfSense as a multi-wan / load-balancing / fail-over firewall for my company when i found something strange. Looking at the howto at this address http://doc.pfsense.org/index.php/Multi-Wan/Load-Balancing i found that

[pfSense Support] Load Balancer

2007-03-09 Thread Kelvin Chiang
Hi, I have some questions concerning Load Balancer and Failover, hope that someone can help. 1. I have configured the load balancer for 2 physical interfaces (WAN OPT1). I monitor the states table and realized that the icmp packets for monitoring purpose were fired only from the OPT1

AW: [pfSense Support] Load Balancer

2007-03-09 Thread Holger Bauer
services that run on both or prefer the one or other connection. Holger Von: Kelvin Chiang [mailto:[EMAIL PROTECTED] Gesendet: Freitag, 9. März 2007 11:36 An: support@pfsense.com Betreff: [pfSense Support] Load Balancer Hi, I have some questions concerning Load

RE: [pfSense Support] Load Balancer

2007-03-09 Thread Kelvin Chiang
: Holger Bauer [mailto:[EMAIL PROTECTED] Sent: Friday, March 09, 2007 7:25 PM To: support@pfsense.com Subject: AW: [pfSense Support] Load Balancer Regarding 1: we'll check this Regarding 2: Yes, you are right. You typicall want to even create 3 pools for this: one loadbalanced (WAN+OPT1), one failover

AW: [pfSense Support] Load Balancer

2007-03-09 Thread Holger Bauer
Message- From: Holger Bauer [mailto:[EMAIL PROTECTED] Sent: Friday, March 09, 2007 7:25 PM To: support@pfsense.com Subject: AW: [pfSense Support] Load Balancer Regarding 1: we'll check this Regarding 2: Yes, you are right. You typicall want to even create 3 pools for this: one loadbalanced (WAN

RE: [pfSense Support] Load Balancer

2007-03-09 Thread Kelvin Chiang
Hi Holger, we built it on 31st Jan 2007. Has there been significant change since then? -Original Message- From: Holger Bauer [mailto:[EMAIL PROTECTED] Sent: Friday, March 09, 2007 7:42 PM To: support@pfsense.com Subject: AW: [pfSense Support] Load Balancer 1. What Version of pfSense

RE: [pfSense Support] Load Balancer

2007-03-09 Thread Sean Cavanaugh
] Load Balancer Hi Holger, we built it on 31st Jan 2007. Has there been significant change since then? -Original Message- From: Holger Bauer [mailto:[EMAIL PROTECTED] Sent: Friday, March 09, 2007 7:42 PM To: support@pfsense.com Subject: AW: [pfSense Support] Load Balancer 1. What

AW: [pfSense Support] Load Balancer

2007-03-09 Thread Holger Bauer
: Freitag, 9. März 2007 15:19 An: support@pfsense.com Betreff: RE: [pfSense Support] Load Balancer Hi Holger, we built it on 31st Jan 2007. Has there been significant change since then? -Original Message- From: Holger Bauer [mailto:[EMAIL PROTECTED] Sent: Friday, March 09, 2007 7:42 PM

RE: [pfSense Support] Load Balancer

2007-03-09 Thread Kelvin Chiang
Ok, Thanks Holger -Original Message- From: Holger Bauer [mailto:[EMAIL PROTECTED] Sent: Friday, March 09, 2007 10:44 PM To: support@pfsense.com Subject: AW: [pfSense Support] Load Balancer For sure. I remember that there has been a rule issue with pings that also resulted in wan

Re: [pfSense Support] Load balancer problem

2006-09-19 Thread Heath Henderson
@pfsense.com Subject: Re: [pfSense Support] Load balancer problem http://www.pfsense.com/~sullrich/1.0-SNAPSHOT-09-18-06/ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: [pfSense Support] Load balancer problem

2006-09-19 Thread Bill Marquette
On 9/19/06, Heath Henderson [EMAIL PROTECTED] wrote: This is probably a question which doesn't require an answer, but I am a little leary about updating to the http://www.pfsense.com/~sullrich/1.0-SNAPSHOT-09-18-06/ I was curious of how to go about the udpate. I see two files which look like

Re: [pfSense Support] Load balancer problem

2006-09-19 Thread Scott Ullrich
On 9/19/06, Bill Marquette [EMAIL PROTECTED] wrote: Hmm, there is a README in the same directory that explains quite a bit. README?! What's that!? Shouldn't I just be asking questions and not READING!? - To unsubscribe,

RE: [pfSense Support] Load balancer problem

2006-09-19 Thread Tim Dickson
You guys crack me up! :) Honestly, I'm surprised you have as much patience as you do! -Tim -Original Message- From: Scott Ullrich [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 19, 2006 9:46 AM To: support@pfsense.com Subject: Re: [pfSense Support] Load balancer problem On 9/19/06

Re: [pfSense Support] Load balancer problem

2006-09-19 Thread Heath Henderson
Conversation: [pfSense Support] Load balancer problem Subject: RE: [pfSense Support] Load balancer problem If you run off a hdd full installation upload the full update file at systemfirmware. It will apply the update and reboot after that. You won't lose your configuration, just a downtime

Re: [pfSense Support] Load balancer problem

2006-09-19 Thread Heath Henderson
: Tue, 19 Sep 2006 10:55:53 -0500 To: support@pfsense.com Subject: Re: [pfSense Support] Load balancer problem On 9/19/06, Heath Henderson [EMAIL PROTECTED] wrote: This is probably a question which doesn't require an answer, but I am a little leary about updating to the http://www.pfsense.com

[pfSense Support] Load balancer problem

2006-09-18 Thread Catalin Epure
I have settled the load balancer section to use 2 isp connections. For some reason the log looks like this: Sep 19 03:10:13 slbd[297]: Service Balancer changed status, reloading filter policy Sep 19 03:10:13 slbd[297]: ICMP poll succeeded for

Re: [pfSense Support] Load balancer problem

2006-09-18 Thread Scott Ullrich
On 9/19/06, Catalin Epure [EMAIL PROTECTED] wrote: I have settled the load balancer section to use 2 isp connections. For some reason the log looks like this: Sep 19 03:10:13 slbd[297]: Service Balancer changed status, reloading filter policy Sep 19 03:10:13

Re: [pfSense Support] Load balancer problem

2006-09-18 Thread Scott Ullrich
On 9/19/06, Catalin Epure [EMAIL PROTECTED] wrote: v.1 R.C.2 Catalin Please upgrade to http://www.pfsense.com/~sullrich/1.0-SNAPSHOT-09-18-06/ and see if this solves the problems. Thanks! - To unsubscribe, e-mail: [EMAIL

[pfSense Support] load balancer status screen.

2006-08-14 Thread Ryan Rodrigue
I have 2 Wan connections connected using load balancer. On the StatusLoad Balancer screen it shows both online, but the color around WAN 2 changes from green to yellow pretty often. Even when it is yellow, it is still up and still says online. My question is, what does the color mean, if

Re: FW: [pfSense Support] load balancer

2006-07-18 Thread Bill Marquette
On 7/18/06, Tunge2 [EMAIL PROTECTED] wrote: The Lan interface rules are: TCP/UDP LAN net 22 (SSH) * * * SSH LAN * LAN net * * *Load Balance Default LAN - any Ive tryed to add rules to the WAN and OPT

FW: [pfSense Support] load balancer

2006-07-17 Thread Tunge2
It is not possible to build up any connection (except web traffic) evenwhen the WAN and OPT connection are connected to the Internet When i start for example the program Putty i get the message unable to open connection to 192.168.1.1 (i try edseveral different ip address) Network error connection

Re: FW: [pfSense Support] load balancer

2006-07-17 Thread Bill Marquette
the load balance option from PFsense all traffic goes well (SSH, telnet) I don't get any messages in the log file -Oorspronkelijk bericht- Van: Bill Marquette [mailto: [EMAIL PROTECTED] Verzonden: zaterdag 15 juli 2006 0:36 Aan: support@pfsense.com Onderwerp: Re: [pfSense Support] load

[pfSense Support] load balancer

2006-07-14 Thread Tunge2
hello, We installed the load balancer on our PFsense RELENG_1_SNAPSHOT-07-09-2006 machine. The load balance seams to work great at web traffic (if we shutdown the WAN connection, OPT takes it over nicely:) that's a fantastic function, keep up the great work) But if i try to build up any SSHor

Re: [pfSense Support] load balancer

2006-07-14 Thread Bill Marquette
Fails in what way? You mean, when a WAN goes down you get disconnected (to be expected)? --Bill On 7/14/06, Tunge2 [EMAIL PROTECTED] wrote: hello, We installed the load balancer on our PFsense RELENG_1_SNAPSHOT-07-09-2006 machine. The load balance seams to work great at web traffic (if we

[pfSense Support] Load Balancer

2005-08-19 Thread Rodolfo Vardelli
I have just upgrade from 73.12 to 77 on soekris 4801 Is load balancer for outbound connection too? The bug of ssh not restarting after a configuration restore is still here. regards Rodolfo - To unsubscribe, e-mail: [EMAIL

[pfSense Support] load balancer

2005-08-08 Thread alan walters
Just looking for a quick blah on how the incoming load balancer should work

Re: [pfSense Support] load balancer

2005-08-08 Thread Bill Marquette
You won't find one until that work is complete. How it should work is not how it currently works - it's a functioning work in progress. --Bill On 8/8/05, alan walters [EMAIL PROTECTED] wrote: Just looking for a quick blah on how the incoming load balancer should work