Re: Carp basics

2009-09-29 Thread Janne Johansson 
Siju George wrote:
 Is it possible for me to make both fw1 and fw2 listen on ip address
 172.17.1.0 and load balance connections through both ISPs?
 And also make a fail over set up so that when either ISP1 or ISP2 is
 not functioning all hosts in the network  going through the other.

http://www.openbsd.org/faq/faq6.html#Multipath
might help.

Re: Carp basics

2009-09-29 Thread Steven Surdock 
 -Original Message-
 From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf
 Of Janne Johansson
 Sent: Tuesday, September 29, 2009 6:14 AM
 To: misc
 Subject: Re: Carp basics

 Siju George wrote:
  Is it possible for me to make both fw1 and fw2 listen on ip address
  172.17.1.0 and load balance connections through both ISPs?
  And also make a fail over set up so that when either ISP1 or ISP2 is
  not functioning all hosts in the network  going through the other.

 http://www.openbsd.org/faq/faq6.html#Multipath
 might help.

Some web sites (e.g. YouTube) don't seem to work well with NAT based
load-balancing.  Check out sticky-address options in PF, which might
help that. Also, to achieve reliable fail-over look at using ifstated.
Check the mail archive for examples.  Finally, 172.17.1.0 isn't a legit
address to listen on.

-Steve S.