You won't find one until that work is complete. How it should work is
not how it currently works - it's a functioning work in progress.
--Bill
On 8/8/05, alan walters <[EMAIL PROTECTED]> wrote:
>
>
>
> Just looking for a quick blah on how the incoming load balancer should
> work
---
PS. give it a week, should be solid and in it's final incarnation.
--Bill
On 8/8/05, Bill Marquette <[EMAIL PROTECTED]> wrote:
> You won't find one until that work is complete. How it should work is
> not how it currently works - it's a functioning work in progress.
>
> --Bill
>
> On 8/8/05, al
On 8/19/05, Rodolfo Vardelli <[EMAIL PROTECTED]> wrote:
> I have just upgrade from 73.12 to 77 on soekris 4801
> Is load balancer for outbound connection too?
> The "bug" of ssh not restarting after a configuration restore is still here.
SSH works fine. Remove anything in /cf/conf/config.xml tha
Scott Ullrich ha scritto:
The "bug" of ssh not restarting after a configuration restore is still here.
SSH works fine. Remove anything in /cf/conf/config.xml that has SSH in it.
yes, ssh works fine, but if you restore a configuration, it keeps the
old pwd (pfsense) and don't use th
Fails in what way? You mean, when a WAN goes down you get
disconnected (to be expected)?
--Bill
On 7/14/06, Tunge2 <[EMAIL PROTECTED]> wrote:
hello,
We installed the load balancer on our PFsense RELENG_1_SNAPSHOT-07-09-2006
machine. The load balance seams to work great at web traffic (if we
Hi Holger,
1. I take back my words. WAN interface fires icmp poll too, but strange
that the icmp poll fired by OPT1 is found in the states table but not
for the one fired by the WAN interface. I found this on a "reject" log
in firewall log. I configured the firewall rule for WAN interface to
accep
are you running? If it's not a recent
snapshot please upgrade.
2. Yes, that is correct.
Holger
-Ursprüngliche Nachricht-
Von: Kelvin Chiang [mailto:[EMAIL PROTECTED]
Gesendet: Freitag, 9. März 2007 12:36
An: support@pfsense.com
Betreff: RE: [pfSense Support] Load Balancer
Hi Holger,
g
> [mailto:[EMAIL PROTECTED] > Gesendet: Freitag, 9. März 2007 12:36> An:
> support@pfsense.com> Betreff: RE: [pfSense Support] Load Balancer> > Hi
> Holger,> > 1. I take back my words. WAN interface fires icmp poll too, but
> strange> that the icmp pol
quality rrd graph showing constant packetloss which
was fixed and your problem seems to be similiar.
Holger
-Ursprüngliche Nachricht-
Von: Kelvin Chiang [mailto:[EMAIL PROTECTED]
Gesendet: Freitag, 9. März 2007 15:19
An: support@pfsense.com
Betreff: RE: [pfSense Support] Load Balancer
Hi
Hiren Joshi wrote:
Hello all,
I'm using pfsense to firewall at the moment but pass all the http
traffic to an internal load balancer (nginx). My question is, would it
be possible to replace nginx with pfsense and how would the two
compare in terms of performance?
Many thanks,
Josh.
We use
gt; Subject: Re: [pfSense Support] Load balancer
>
> Hiren Joshi wrote:
> > Hello all,
> >
> > I'm using pfsense to firewall at the moment but pass all the http
> > traffic to an internal load balancer (nginx). My question
> is, would it
> > be p
A good start is here:
http://doc.pfsense.org/index.php?title=Category:Load_balancing
Tim Nelson
Systems/Network Support
Rockbochs Inc.
(218)727-4332 x105
- "Hiren Joshi" wrote:
> Where can I find details about the pfsense balancer? Things like how
> a
> request is handled and config optio
Thanks for the quick reply... I just couldn't find it on the wiki!
> -Original Message-
> From: Tim Nelson [mailto:tnel...@rockbochs.com]
> Sent: 07 February 2009 15:32
> To: support@pfsense.com
> Subject: Re: [pfSense Support] Load balancer
>
> A go
I have to admit it took me a bit to find it as well. For whatever reason, when
looking by category, it assumes you want to edit the category. I simply had to
change the url from
http://doc.pfsense.org/index.php?title=Category:Load_balancing&action=edit to
http://doc.pfsense.org/index.php?title
On Sat, Feb 7, 2009 at 10:47 AM, Tim Nelson wrote:
> I have to admit it took me a bit to find it as well. For whatever reason,
> when looking by category, it assumes you want to edit the category. I simply
> had to change the url from
> http://doc.pfsense.org/index.php?title=Category:Load_balan
On 9/19/06, Catalin Epure <[EMAIL PROTECTED]> wrote:
I have settled the load balancer section to use 2 isp connections.
For some reason the log looks like this:
Sep 19 03:10:13 slbd[297]: Service Balancer changed status,
reloading filter policy
Sep 19 03:10:13 slbd
Scott Ullrich wrote:
On 9/19/06, Catalin Epure
<[EMAIL PROTECTED]> wrote:
I have settled the load balancer section to use 2 isp connections.
For some reason the log looks like this:
Sep 19 03:10:13 slbd[297]: Service Balancer changed
status, reloading fi
On 9/19/06, Catalin Epure <[EMAIL PROTECTED]> wrote:
v.1 R.C.2
Catalin
Please upgrade to
http://www.pfsense.com/~sullrich/1.0-SNAPSHOT-09-18-06/ and see if
this solves the problems.
Thanks!
-
To unsubscribe, e-mail: [EMAIL
0400
> To:
> Subject: Re: [pfSense Support] Load balancer problem
>
> http://www.pfsense.com/~sullrich/1.0-SNAPSHOT-09-18-06/
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
ember 19, 2006 3:44 PM
> To: support@pfsense.com
> Subject: Re: [pfSense Support] Load balancer problem
>
>
> This is probably a question which doesn't require an answer,
> but I am a
> little leary about updating to the
> http://www.pfsense.com/~sullrich/1.0-SNAPSHOT-
On 9/19/06, Heath Henderson <[EMAIL PROTECTED]> wrote:
This is probably a question which doesn't require an answer, but I am a
little leary about updating to the
http://www.pfsense.com/~sullrich/1.0-SNAPSHOT-09-18-06/
I was curious of how to go about the udpate. I see two files which look
like
On 9/19/06, Bill Marquette <[EMAIL PROTECTED]> wrote:
Hmm, there is a README in the same directory that explains quite a bit.
README?! What's that!? Shouldn't I just be asking questions and not READING!?
-
To unsubscribe, e-
You guys crack me up! :)
Honestly, I'm surprised you have as much patience as you do!
-Tim
-Original Message-
From: Scott Ullrich [mailto:[EMAIL PROTECTED]
Sent: Tuesday, September 19, 2006 9:46 AM
To: support@pfsense.com
Subject: Re: [pfSense Support] Load balancer problem
On 9/
ion: [pfSense Support] Load balancer problem
> Subject: RE: [pfSense Support] Load balancer problem
>
> If you run off a hdd full installation upload the full update file at
> system>firmware. It will apply the update and reboot after that. You won't
> lose your configuration,
te: Tue, 19 Sep 2006 10:55:53 -0500
> To:
> Subject: Re: [pfSense Support] Load balancer problem
>
> On 9/19/06, Heath Henderson <[EMAIL PROTECTED]> wrote:
>> This is probably a question which doesn't require an answer, but I am a
>> little leary about updating
On 4/19/07, Quirino Santilli <[EMAIL PROTECTED]> wrote:
I was finally configuring pfSense as a multi-wan / load-balancing /
fail-over firewall for my company when i found something strange.
Looking at the howto at this address
http://doc.pfsense.org/index.php/Multi-Wan/Load-Balancing i
found tha
You most likely don't run a latest snapshot but a releaseversion which
has a different gui. Please make sure you are on a version from
http://snapshots.pfsense.com/FreeBSD6/RELENG_1_2/ which has the gui
mentioned at http://doc.pfsense.org/index.php/Multi-Wan/Load-Balancing .
Holger
-Original
Try one of the 1.2.1 beta's. Many issues resolved, all around better
product.
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
1. Upgrade to 1.2-BETA-1
2. See http://doc.pfsense.org/index.php/MultiWanVersion1.2
On 6/7/07, Dave Cabot <[EMAIL PROTECTED]> wrote:
I'm trying to get the load balancer to work, but it causes the system to do
a hard lockup.
Hardware Compaq SFF P2 (400Mhz, 256MB ram)
I'm using the internal ether
Inbound or outbound load balancing?
--Bill
On 10/9/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
>
> Hi There,
>
> Im using 1.2 RC2 on Intel boxes. I have the load balancer setup and working,
> the two machines are syncing settings and the carp is working properly.
> However, if I reboot t
Hi Bill,
Sorry, inbound... we have 2x Web Servers behind the PFsense boxes so we are
load balancing 443 and 80 TCP
Lee
On Tue, 9 Oct 2007 08:47:27 -0500, "Bill Marquette" <[EMAIL PROTECTED]> wrote:
> Inbound or outbound load balancing?
>
> --Bill
>
> On 10/9/07, [EMAIL PROTECTED] <[EMAIL PR
Can you confirm that the load balancer config sync'd over to the
secondary? Also, assuming it did, can you do a 'ps -ax |grep slb'
from the shell? I suspect it never started slbd after sync (as an
interim workaround, you could try going to the load balancer page on
the secondary and editing/savin
Hi Bill,
The config was sync'd ok, I can see it on both boxes. Below is a ps -ax
from the secondary machine:
# ps -ax |grep slb
60083 ?? Ss 0:00.51 /usr/local/sbin/slbd -c/var/etc/slbd.conf -r5000
65097 p0 RV 0:00.00 grep slb (tcsh)
Looks to me like its running? I tried editing
Hmm, what does the output of "pfctl -sn -aslb" look like on both
boxes? The other obvious question is, are the virtual addresses that
front end your load balance pool CARP addresses? If they aren't, then
the secondary won't take them over on failover regardless of the load
balance config.
--Bill
Hi Bill,
All is carp, when the primary is off, I can ping the address still.
Primary:
# pfctl -sn -aslb
rdr inet proto tcp from any to 10.2.48.1 port = smtp -> { 10.5.49.1,
10.5.49.2 } port 25 round-robin sticky-address
rdr inet proto tcp from any to 10.2.48.1 port = http -> { 10.5.49.1,
10.5
Strange, other than the sticky address (which should be more a
nuisance than anything) not getting set on the secondary, I'm not
seeing anything obvious that would prevent the connection from
working.
The only other thing I can think to look at is whether the rulesets
(/tmp/rules.debug) are the sa
Hi Bill,
Same here, I even have the same thing working on 1.1 PFsense for another
customer. Is there a way to down grade from 1.2 RC2 to 1.1?
Thanks,
Lee
Bill Marquette wrote:
Strange, other than the sticky address (which should be more a
nuisance than anything) not getting set on the seco
Lee Hetherington wrote:
Hi Bill,
Same here, I even have the same thing working on 1.1 PFsense for
another customer. Is there a way to down grade from 1.2 RC2 to 1.1?
It would be MUCH better to help us figure out if there is indeed a
regression in this from 1.2 to 1.0.1. Going back to 1.0.1
Hi Chris,
Its two different systems, in the 1.1 system I have the hosts behind the
balancer being natted by the pfsense box, where as on the 1.2 they are
direct routed, and natted upstream using a PIX 515e.
Ive tried tcp dump on the secondary as discussed with Bill, I can see
the packets hit
The documentation site is very helpful in this regard:
http://devwiki.pfsense.org/OutgoingLoadBalancing
or
http://devwiki.pfsense.org/IncomingLoadBalancing
choose your poison.
Joel Robison wrote:
Hi ALL!
I have a few questions about the load balancer function:
1. Can I round-robin udp packe
On Wed, Aug 26, 2009 at 7:42 AM, Jesse Vollmar wrote:
>
> It seems like this is related to that OPT interface not having the
> "gateway" specified on it. That interface is however working and sending
> traffic out to my ISP's gateway.
>
At the risk of looking like the N00b that I am, I don't see
On Wed, Aug 26, 2009 at 10:39 AM, David Burgess wrote:
>
> At the risk of looking like the N00b that I am, I don't see how pfsense can
> send traffic out on an interface that has no gateway. Respond, yes; initiate,
> no. Can we have a look at your routing table?
> db
The route for that OPT1 in
On Wed, Aug 26, 2009 at 8:57 AM, Jesse Vollmar wrote:
>
> The route for that OPT1 interface is showing up it is em2.
>
> $ netstat -nr
> Routing tables
>
> Internet:
> DestinationGatewayFlagsRefs Use Netif Expire
> default67.38.60.77UGS 0
On Wed, Aug 26, 2009 at 11:19 AM, David Burgess wrote:
> As expected, you have no gateway on em2. pfsense is able to route packets to
> any host on that network, which means it can reply to any incoming packet,
> or contact any machine on that network, but any traffic that doesn't match
> the exac
On Wed, Aug 26, 2009 at 9:24 AM, Jesse Vollmar wrote:
> On Wed, Aug 26, 2009 at 11:19 AM, David Burgess wrote:
>
> I have entered the ISP's gateway (They actually have two due to us
> using multiple subnets) and when I do, pfsense can only ping that
> address. Packets to any other network won't g
> pfsense's GUI ping utility lies WRT interface selection. Try unplugging the
> WAN and ping some internet hosts.
>
> db
>
Got it working. Thanks.
-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands,
Yellow state means this interface just came back from state down. If it often
is displayed as yellow that link doesn't seem to be very reliable. Also see the
last change date next to the status.
Holger
> -Original Message-
> From: Ryan Rodrigue [mailto:[EMAIL PROTECTED]
> Sent: Monday,
47 matches
Mail list logo
