Re: Linux routing performace

2011-05-05 Thread Willy Tarreau
Hi James, On Wed, May 04, 2011 at 09:32:04AM -0400, James Bardin wrote: This isn't the end of the world if it's unsolvable, as I can request that all load-balancing service IPs be public for now, and spin up another haproxy pair for private services if there is a specific requirement. I

Re: Linux routing performace

2011-05-05 Thread James Bardin
On Thu, May 5, 2011 at 7:02 AM, Willy Tarreau w...@1wt.eu wrote: I have no idea with ip rules impact performance that much for you. Anyway, since you're dealing with two interfaces, you can explicitly bind haproxy to each of them and still have a default route on each interface. The trick is

Re: Linux routing performace

2011-05-05 Thread Willy Tarreau
On Thu, May 05, 2011 at 10:22:55AM -0400, James Bardin wrote: On Thu, May 5, 2011 at 7:02 AM, Willy Tarreau w...@1wt.eu wrote: I have no idea with ip rules impact performance that much for you. Anyway, since you're dealing with two interfaces, you can explicitly bind haproxy to each of

Re: Linux routing performace

2011-05-05 Thread John Marrett
James, Maybe you could explain your network structure a little better to us. What networks do you reach on your internal network, is it a limited set? I assume that you need to reach all internet addresses on the public interface? So far nothing in your description suggests that you couldn't

Re: Linux routing performace

2011-05-04 Thread James Bardin
Thanks guys, On Tue, May 3, 2011 at 10:50 PM, Joseph Hardeman jwharde...@gmail.com wrote: route add -net 192.168.1.16 netmask 255.255.255.240 gw 10.0.0.1 A simple route doesn't work in this case, as the packets have to leave out the correct interface as well, or they will be dropped by the

Re: Linux routing performace

2011-05-03 Thread Jon Watte
Does the internal network need a gateway at all? We run a very similar set-up, HAProxy listening on a public network, and forwarding TCP connections to servers on an internal network. Because all the servers are on the same 10/8 subnet, no default gateway is needed. Sincerely, jw Jon Watte,

Re: Linux routing performace

2011-05-03 Thread Joseph Hardeman
Hi James, I would agree with jw. If your internal network is all on the same subnet, you don't need the second gateway. Now if you are routing to different subnets on the internal network, you could simply put route statements pointing those routes to use the internal router instead of adding a