Re: Problem with load-balancing

2012-02-04 Thread Han Hwei Woo
Never mind, had a 'no state' rule that crept in. Gah, that was many 
hours wasted.


On 2/4/2012 7:11 PM, Han Hwei Woo wrote:
Hello, I'm currently having some troubles with >4.6 configuration for 
a load-balancing configuration.


$ext_if is the external interface to the Internet
$vip is a valid routable IP address, but not bound to any interface, 
just used as a 'virtual' IP
$server1, $server2 are also real routable IP addresses, on servers 
inside the network


I'm also using CARP, both on the external interface and the internal 
interface but $ext_if is defined as the actual external interface


On 4.6, this rules does exactly what I'm trying to accomplish

rdr on $ext_if inet proto tcp from any to $vip port { 80, 81, 443 } -> 
{ $server1, $server2 } \

round-robin sticky-address

However, currently trying this on 5.0 doesn't work at all:

match in on $ext_if inet proto tcp from any to $vip port { 80, 81, 443 
} -> { $server1, $server2 } \

round-robin sticky-address

I've been stuck on this for hours, so I'd appreciate any feedback that 
might help me get this working.




Problem with load-balancing

2012-02-04 Thread Han Hwei Woo
Hello, I'm currently having some troubles with >4.6 configuration for a 
load-balancing configuration.


$ext_if is the external interface to the Internet
$vip is a valid routable IP address, but not bound to any interface, 
just used as a 'virtual' IP
$server1, $server2 are also real routable IP addresses, on servers 
inside the network


I'm also using CARP, both on the external interface and the internal 
interface but $ext_if is defined as the actual external interface


On 4.6, this rules does exactly what I'm trying to accomplish

rdr on $ext_if inet proto tcp from any to $vip port { 80, 81, 443 } -> { 
$server1, $server2 } \

round-robin sticky-address

However, currently trying this on 5.0 doesn't work at all:

match in on $ext_if inet proto tcp from any to $vip port { 80, 81, 443 } 
-> { $server1, $server2 } \

round-robin sticky-address

I've been stuck on this for hours, so I'd appreciate any feedback that 
might help me get this working.