Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Resolved Pfsense 2.0 RC1 LoadBalacing, But Non Default Gateway Failover Working?

    Scheduled Pinned Locked Moved 2.0-RC Snapshot Feedback and Problems - RETIRED
    17 Posts 6 Posters 8.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      skear
      last edited by

      And when you add the LAN rule to direct traffic to Wan1BalanceWan2 you should delete the other default lan rule.  So in your screenshot delete the rule with a description "default allow LAN to any rule".

      Not correct at all. In the screenshot this rule is disabled and so it is ok.

      Ahh you're right, I did not notice it was disabled.

      Check out my pfSense guides

      1 Reply Last reply Reply Quote 0
      • F
        farrukhndm
        last edited by

        Still No success of loadBalacning ,When I download some file it always Go to default Gateway rather Using Wan1BalcningWan2.
        pleas check corresponding logs .

        Gateways.JPG_thumb
        ![download speed.JPG_thumb](/public/imported_attachments/1/download speed.JPG_thumb)
        ![download speed.JPG](/public/imported_attachments/1/download speed.JPG)
        DNS.JPG_thumb
        DNS.JPG
        2.JPG
        1.JPG_thumb
        Gateways.JPG
        2.JPG_thumb
        1.JPG

        1 Reply Last reply Reply Quote 0
        • N
          Nachtfalke
          last edited by

          Your firewall rule seems to be wrong for my understanding.
          Why did you enter port 8080 as destination ?
          This means, that this rule only works for destination addresses with port 8080. Normal http (80) or https (443) will not be applied to this rule.

          Further I think you totally misunderstood LoadBalancing (or I did with your question).

          LoadBalancing does NOT mean, that you have double speed. It does NOT double DSL1 (2MBit/s) and DSL2 (5MBit/s) to one line with 7MBit/s. It will just help you to load the balance over these two lines. If you start two downloads, one will downloading over DSL1 with 2MBit/s and the othr will downloading over DSL2 with 5Mbit/s.

          You could test if your loadbalancing is working while surfing to this page and refresh this page several times after another
          http://www.pfsense.org/ip.php
          Then you will see, that your IP changes (DSL1 <-> DSL2). But before this will work you have to correct your firewall rule (destination port to any).

          Another good site to test ist maps.google.com and zoom in and out. Than you can see that bothe lines will use LoadBalancing.

          1 Reply Last reply Reply Quote 0
          • F
            farrukhndm
            last edited by

            Forum pfsense

            Your firewall rule seems to be wrong for my understanding.
            Why did you enter port 8080 as destination ?

            On port 8080 My Squid is listening,So i just route traffic with outbound request for 8080.I think its correct. Further also checked destination to <any>but it doesn't impact of load balancing .
            After changing destination port to <any>in firewall rule
            when i check the Ip ,it always uses the WAN IP whose Gateway is set to default

            http://www.pfsense.org/ip.php
            Your IP is 2xx.xxx.xxx.130
            Your IP is 2xx.xxx.xxx.130
            Your IP is 2xx.xxx.xxx.130
            Your IP is 2xx.xxx.xxx.130
            Your IP is 2xx.xxx.xxx.130

            (Still my Load balancing of traffic is not working ???????)

            LoadBalancing does NOT mean, that you have double speed. It does NOT double DSL1 (2MBit/s) and DSL2 (5MBit/s) to one line with 7MBit/s

            Yes i was thinking wrong that load balancing double speed of your WAN Links,so its clear know.
            Is there any way to double speed of my WAN Links in pfsense ???

            Further what i observe,All traffic goes through the Default gateway rather going from Wan1BalanceWan2
            I put all load but all traffic passing to interface which is set default.

            please guide me whats next???

            pf-01.JPG
            pf-01.JPG_thumb
            pf-02.JPG
            pf-02.JPG_thumb
            pf-01.JPG
            pf-01.JPG_thumb
            pf-02.JPG
            pf-02.JPG_thumb</any></any>

            1 Reply Last reply Reply Quote 0
            • N
              Nachtfalke
              last edited by

              Do both of your WAN connections are in the same subnet / having the same gateway ?
              If you can answer this with "yes", then it doesn't work without a trick.

              LoadBalancing at the moment only works, if both WANs have different gateways.

              1 Reply Last reply Reply Quote 0
              • F
                farrukhndm
                last edited by

                WAN1 Gateway and WAN2 Gatway are different with differnent subnets but ISP is same.its mean DNS are same which makes no differance .

                Still No Clue where i am wrong in configuring LoadBalancing.

                Why my traffic goes to Default gateways rather than going from Ladbalcing (Group Gateway)???

                1 Reply Last reply Reply Quote 0
                • F
                  farrukhndm
                  last edited by

                  One thing that i miss to told you i am running Proxy Squid ,And i think squid always route traffic through Default gateway ?????

                  Here is another Thread that explain how to squid traffic load balancing

                  http://forum.pfsense.org/index.php/topic,33895.0.html

                  But still i am facing problem with error

                  Connection to Failed
                  The system returned:

                  (49) Can't assign requested address

                  Please please help me help me ..

                  1 Reply Last reply Reply Quote 0
                  • ?
                    Guest
                    last edited by

                    To effectively double your speed, you would need to use BGP or something similar. I'm going through the process of setting this up where I work, we have a paired T1 line giving us 3mbps, and a single T1 @ 1.5mbps.

                    Pfsense has a BGP package, but I couldn't tell you how to set it up, we're relying on our ISP to configure this for us.

                    1 Reply Last reply Reply Quote 0
                    • F
                      farrukhndm
                      last edited by

                      Hi,
                      WanGw(Default)
                      OptGw()
                      Please get screen shots of My Pfsense 2.0 RC1 with Squid Load Balacing working , failover Work only when Non Defult GatewaysI(OptGw) in My Routes goes down.
                      When My Default Gateway(WANGw) goes down.My Internet Stop working ???? Any help.

                      Squid Still send its traffic to defult gateway ?????? is there any way to Fully working fail over if Default gateway goes down

                      ![2011-05-05, 12_17_00.jpg](/public/imported_attachments/1/2011-05-05, 12_17_00.jpg)
                      ![2011-05-05, 12_17_00.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_17_00.jpg_thumb)
                      ![2011-05-05, 12_17_04.jpg](/public/imported_attachments/1/2011-05-05, 12_17_04.jpg)
                      ![2011-05-05, 12_17_04.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_17_04.jpg_thumb)
                      ![2011-05-05, 12_17_36.jpg](/public/imported_attachments/1/2011-05-05, 12_17_36.jpg)
                      ![2011-05-05, 12_17_36.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_17_36.jpg_thumb)
                      ![2011-05-05, 12_17_50.jpg](/public/imported_attachments/1/2011-05-05, 12_17_50.jpg)
                      ![2011-05-05, 12_17_50.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_17_50.jpg_thumb)
                      ![2011-05-05, 12_17_55.jpg](/public/imported_attachments/1/2011-05-05, 12_17_55.jpg)
                      ![2011-05-05, 12_17_55.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_17_55.jpg_thumb)
                      ![2011-05-05, 12_28_23.jpg](/public/imported_attachments/1/2011-05-05, 12_28_23.jpg)
                      ![2011-05-05, 12_28_23.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_28_23.jpg_thumb)
                      ![2011-05-05, 12_29_10.jpg](/public/imported_attachments/1/2011-05-05, 12_29_10.jpg)
                      ![2011-05-05, 12_29_10.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_29_10.jpg_thumb)
                      ![2011-05-05, 15_10_21.jpg](/public/imported_attachments/1/2011-05-05, 15_10_21.jpg)
                      ![2011-05-05, 15_10_21.jpg_thumb](/public/imported_attachments/1/2011-05-05, 15_10_21.jpg_thumb)
                      ![2011-05-05, 15_10_30.jpg](/public/imported_attachments/1/2011-05-05, 15_10_30.jpg)
                      ![2011-05-05, 15_10_30.jpg_thumb](/public/imported_attachments/1/2011-05-05, 15_10_30.jpg_thumb)
                      ![2011-05-05, 15_19_18.JPG](/public/imported_attachments/1/2011-05-05, 15_19_18.JPG)
                      ![2011-05-05, 15_19_18.JPG_thumb](/public/imported_attachments/1/2011-05-05, 15_19_18.JPG_thumb)

                      1 Reply Last reply Reply Quote 0
                      • E
                        eri--
                        last edited by

                        just choose on squid loopback interface and modify your floating rule to say from 127.0.0.1/8 and not from WAN address without an interface selected.

                        1 Reply Last reply Reply Quote 0
                        • F
                          farrukhndm
                          last edited by

                          Browsing Strucked! after change given settings ????
                          i changed the rule
                          1)Squid on Loopback interface
                          2)Floating from 127.0.0.1/8
                          3)Firewall LAN Enabling Rule as in attached image
                          4)Firewall LAN Disabling Rule as in attached image

                          ![2011-05-05, 16_34_54.jpg](/public/imported_attachments/1/2011-05-05, 16_34_54.jpg)
                          ![2011-05-05, 16_34_54.jpg_thumb](/public/imported_attachments/1/2011-05-05, 16_34_54.jpg_thumb)
                          ![2011-05-05, 16_35_08.jpg](/public/imported_attachments/1/2011-05-05, 16_35_08.jpg)
                          ![2011-05-05, 16_35_08.jpg_thumb](/public/imported_attachments/1/2011-05-05, 16_35_08.jpg_thumb)
                          ![2011-05-05, 16_35_15.jpg](/public/imported_attachments/1/2011-05-05, 16_35_15.jpg)
                          ![2011-05-05, 16_35_15.jpg_thumb](/public/imported_attachments/1/2011-05-05, 16_35_15.jpg_thumb)
                          ![2011-05-05, 16_35_34.jpg](/public/imported_attachments/1/2011-05-05, 16_35_34.jpg)
                          ![2011-05-05, 16_35_34.jpg_thumb](/public/imported_attachments/1/2011-05-05, 16_35_34.jpg_thumb)
                          ![2011-05-05, 16_35_39.jpg](/public/imported_attachments/1/2011-05-05, 16_35_39.jpg)
                          ![2011-05-05, 16_35_39.jpg_thumb](/public/imported_attachments/1/2011-05-05, 16_35_39.jpg_thumb)
                          ![2011-05-05, 16_37_53.JPG](/public/imported_attachments/1/2011-05-05, 16_37_53.JPG)
                          ![2011-05-05, 16_37_53.JPG_thumb](/public/imported_attachments/1/2011-05-05, 16_37_53.JPG_thumb)

                          1 Reply Last reply Reply Quote 0
                          • H
                            heper
                            last edited by

                            also add a floating rule for dns …..

                            out tcp/udp dest_port 53  GW:loadbalance

                            1 Reply Last reply Reply Quote 0
                            • F
                              farrukhndm
                              last edited by

                              Don't affect,

                              If i only use  LoopBack interface in Squid ,browsing dosn't work,so i have to use Both LAN+Loopback. Also apply DNs Rule on Floating but no affect.

                              What i perceive now, No One can done Failover for Default Gateway !!! Am i right .

                              Where are the Pfsense Developers ??? they have placed feature of Load balancing .Please Guide us in how to achieve Failover +Squid

                              regards

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.