Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Loadbalance connection problem

    Routing and Multi WAN
    3
    17
    8.2k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      hoba
      last edited by

      You are not useing the right IPs as gateways in the pool. According to the first post they should be 207.216.0.254 (at WAN) and 192.168.1.1 (at OPT-WAN).

      1 Reply Last reply Reply Quote 0
      • T
        TheRAt
        last edited by

        my WAN IP address is 207.216.9.122
        my WAN GW address is 207.216.0.254

        my OPT1 IP is 192.168.1.200
        my OPT1 GW is 192.168.1.1

        do I still have incorrect addresses in the system ?

        Thanks for your help with this :)

        1 Reply Last reply Reply Quote 0
        • H
          hoba
          last edited by

          Have a look at your loadbalncing pool screenshot. In your screenshot you entered the interface IPs, not the gateways as poolmembers. You have to enter the gateways there.

          1 Reply Last reply Reply Quote 0
          • T
            TheRAt
            last edited by

            I must have been blind when I was reading the instructions ..
            Thanks

            The only problem I have now is that the dns queries deom the firewall seem to fail a lot .. I have provided all the machines on the local net with the primary dns server addresses for each of the ISPs as their DNS servers .. and this seems to get around the problem ..

            Going to read through other posts in the forums, and the wiki to see if I can find a solution .. Thanks again for your help ..

            1 Reply Last reply Reply Quote 0
            • H
              hoba
              last edited by

              This might happen if the main WAN of the pfSense is not always available (check status>systemlogs, loadbalancer). To make DNS failover too use one DNS of the WAN and one of the OPT-WAN at system>general. Then add a static route to OPT-WAN-DNS-Server/32 though OPT-WAN-Gateway at interface OPT-WAN. This way it will use the second DNS if the main WAN is down though the OPT-WAN interface.

              Maybe it's just a problem with your monitor IP for the WAN Interface. Try to use a different monitor. If it doesn't always responds to pings the link will be taken down for at least 5 seconds.

              1 Reply Last reply Reply Quote 0
              • T
                TheRAt
                last edited by

                Thanks ..
                I will try this tonight and post how I go ..

                1 Reply Last reply Reply Quote 0
                • S
                  sai
                  last edited by

                  @hoba:

                  This might happen if the main WAN of the pfSense is not always available (check status>systemlogs, loadbalancer). To make DNS failover too use one DNS of the WAN and one of the OPT-WAN at system>general. Then add a static route to OPT-WAN-DNS-Server/32 though OPT-WAN-Gateway at interface OPT-WAN. This way it will use the second DNS if the main WAN is down though the OPT-WAN interface.

                  Maybe it's just a problem with your monitor IP for the WAN Interface. Try to use a different monitor. If it doesn't always responds to pings the link will be taken down for at least 5 seconds.

                  Could you explain how adding a static route in this case would be done? I dont really understand static routes.

                  My own solution was that I put in policy based routing for the DNS.
                  In Firewall : Rules : LAN
                  Interface LAN, Protocol UDP/TCP, Destination IP address:ISP1 DNS, Destination p$ort: 53 , Gateway = ISP1 Ethernet port.
                  Should this be OK?

                  1 Reply Last reply Reply Quote 0
                  • H
                    hoba
                    last edited by

                    This is ok for connections that are running through the pfSense like if you have a dns server at LAN but can't be utilitzed by the pfSense itself as only connections running through the pfSense can make use of policybasedrouting/loadbalancing. To keep DNS-resolution on the pfSense itself (like for dns forwarder) you need that staticroute entry like described for the DNS-Server of the ISP at OPT-WAN.

                    1 Reply Last reply Reply Quote 0
                    • T
                      TheRAt
                      last edited by

                      have not been able to get to this for a few days ..
                      played with it tonight, and still having the same problems ..
                      DNS is being forwarded for a while, then it just stops .. and I cannot resolve DNS ..
                      the load balancer logs do not indicate a drop on the wan interface ..

                      i think i might have something else misconfigured possibly .. any suggestions ..

                      1 Reply Last reply Reply Quote 0
                      • H
                        hoba
                        last edited by

                        Try to use a different external dns server. Maybe there is a problem with it.

                        1 Reply Last reply Reply Quote 0
                        • T
                          TheRAt
                          last edited by

                          the machine now has 3 different WAN connections …
                          will try changing the primary connection around, and changing the DNS servers ..

                          what I do not understand is that the machines on the LAN are able to work perfectly, as long as they use the DNS servers of the ISP .. I have also set up an internal box with bind on Linux and that seems to run correctly also ..

                          I am sure I have an incorrect entry in the settings for the firewall, but not sure where exactly to look for it ..
                          Off to bed anyways .. will play with it again tomorrow ..

                          1 Reply Last reply Reply Quote 0
                          • S
                            sai
                            last edited by

                            I dont see your static routes. hoba suggested that you will need these. pls post your static routes.

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.