Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Resolved Pfsense 2.0 RC1 LoadBalacing, But Non Default Gateway Failover Working?

    Scheduled Pinned Locked Moved 2.0-RC Snapshot Feedback and Problems - RETIRED
    17 Posts 6 Posters 8.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      Nachtfalke
      last edited by

      Your firewall rule seems to be wrong for my understanding.
      Why did you enter port 8080 as destination ?
      This means, that this rule only works for destination addresses with port 8080. Normal http (80) or https (443) will not be applied to this rule.

      Further I think you totally misunderstood LoadBalancing (or I did with your question).

      LoadBalancing does NOT mean, that you have double speed. It does NOT double DSL1 (2MBit/s) and DSL2 (5MBit/s) to one line with 7MBit/s. It will just help you to load the balance over these two lines. If you start two downloads, one will downloading over DSL1 with 2MBit/s and the othr will downloading over DSL2 with 5Mbit/s.

      You could test if your loadbalancing is working while surfing to this page and refresh this page several times after another
      http://www.pfsense.org/ip.php
      Then you will see, that your IP changes (DSL1 <-> DSL2). But before this will work you have to correct your firewall rule (destination port to any).

      Another good site to test ist maps.google.com and zoom in and out. Than you can see that bothe lines will use LoadBalancing.

      1 Reply Last reply Reply Quote 0
      • F
        farrukhndm
        last edited by

        Forum pfsense

        Your firewall rule seems to be wrong for my understanding.
        Why did you enter port 8080 as destination ?

        On port 8080 My Squid is listening,So i just route traffic with outbound request for 8080.I think its correct. Further also checked destination to <any>but it doesn't impact of load balancing .
        After changing destination port to <any>in firewall rule
        when i check the Ip ,it always uses the WAN IP whose Gateway is set to default

        http://www.pfsense.org/ip.php
        Your IP is 2xx.xxx.xxx.130
        Your IP is 2xx.xxx.xxx.130
        Your IP is 2xx.xxx.xxx.130
        Your IP is 2xx.xxx.xxx.130
        Your IP is 2xx.xxx.xxx.130

        (Still my Load balancing of traffic is not working ???????)

        LoadBalancing does NOT mean, that you have double speed. It does NOT double DSL1 (2MBit/s) and DSL2 (5MBit/s) to one line with 7MBit/s

        Yes i was thinking wrong that load balancing double speed of your WAN Links,so its clear know.
        Is there any way to double speed of my WAN Links in pfsense ???

        Further what i observe,All traffic goes through the Default gateway rather going from Wan1BalanceWan2
        I put all load but all traffic passing to interface which is set default.

        please guide me whats next???

        pf-01.JPG
        pf-01.JPG_thumb
        pf-02.JPG
        pf-02.JPG_thumb
        pf-01.JPG
        pf-01.JPG_thumb
        pf-02.JPG
        pf-02.JPG_thumb</any></any>

        1 Reply Last reply Reply Quote 0
        • N
          Nachtfalke
          last edited by

          Do both of your WAN connections are in the same subnet / having the same gateway ?
          If you can answer this with "yes", then it doesn't work without a trick.

          LoadBalancing at the moment only works, if both WANs have different gateways.

          1 Reply Last reply Reply Quote 0
          • F
            farrukhndm
            last edited by

            WAN1 Gateway and WAN2 Gatway are different with differnent subnets but ISP is same.its mean DNS are same which makes no differance .

            Still No Clue where i am wrong in configuring LoadBalancing.

            Why my traffic goes to Default gateways rather than going from Ladbalcing (Group Gateway)???

            1 Reply Last reply Reply Quote 0
            • F
              farrukhndm
              last edited by

              One thing that i miss to told you i am running Proxy Squid ,And i think squid always route traffic through Default gateway ?????

              Here is another Thread that explain how to squid traffic load balancing

              http://forum.pfsense.org/index.php/topic,33895.0.html

              But still i am facing problem with error

              Connection to Failed
              The system returned:

              (49) Can't assign requested address

              Please please help me help me ..

              1 Reply Last reply Reply Quote 0
              • ?
                Guest
                last edited by

                To effectively double your speed, you would need to use BGP or something similar. I'm going through the process of setting this up where I work, we have a paired T1 line giving us 3mbps, and a single T1 @ 1.5mbps.

                Pfsense has a BGP package, but I couldn't tell you how to set it up, we're relying on our ISP to configure this for us.

                1 Reply Last reply Reply Quote 0
                • F
                  farrukhndm
                  last edited by

                  Hi,
                  WanGw(Default)
                  OptGw()
                  Please get screen shots of My Pfsense 2.0 RC1 with Squid Load Balacing working , failover Work only when Non Defult GatewaysI(OptGw) in My Routes goes down.
                  When My Default Gateway(WANGw) goes down.My Internet Stop working ???? Any help.

                  Squid Still send its traffic to defult gateway ?????? is there any way to Fully working fail over if Default gateway goes down

                  ![2011-05-05, 12_17_00.jpg](/public/imported_attachments/1/2011-05-05, 12_17_00.jpg)
                  ![2011-05-05, 12_17_00.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_17_00.jpg_thumb)
                  ![2011-05-05, 12_17_04.jpg](/public/imported_attachments/1/2011-05-05, 12_17_04.jpg)
                  ![2011-05-05, 12_17_04.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_17_04.jpg_thumb)
                  ![2011-05-05, 12_17_36.jpg](/public/imported_attachments/1/2011-05-05, 12_17_36.jpg)
                  ![2011-05-05, 12_17_36.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_17_36.jpg_thumb)
                  ![2011-05-05, 12_17_50.jpg](/public/imported_attachments/1/2011-05-05, 12_17_50.jpg)
                  ![2011-05-05, 12_17_50.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_17_50.jpg_thumb)
                  ![2011-05-05, 12_17_55.jpg](/public/imported_attachments/1/2011-05-05, 12_17_55.jpg)
                  ![2011-05-05, 12_17_55.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_17_55.jpg_thumb)
                  ![2011-05-05, 12_28_23.jpg](/public/imported_attachments/1/2011-05-05, 12_28_23.jpg)
                  ![2011-05-05, 12_28_23.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_28_23.jpg_thumb)
                  ![2011-05-05, 12_29_10.jpg](/public/imported_attachments/1/2011-05-05, 12_29_10.jpg)
                  ![2011-05-05, 12_29_10.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_29_10.jpg_thumb)
                  ![2011-05-05, 15_10_21.jpg](/public/imported_attachments/1/2011-05-05, 15_10_21.jpg)
                  ![2011-05-05, 15_10_21.jpg_thumb](/public/imported_attachments/1/2011-05-05, 15_10_21.jpg_thumb)
                  ![2011-05-05, 15_10_30.jpg](/public/imported_attachments/1/2011-05-05, 15_10_30.jpg)
                  ![2011-05-05, 15_10_30.jpg_thumb](/public/imported_attachments/1/2011-05-05, 15_10_30.jpg_thumb)
                  ![2011-05-05, 15_19_18.JPG](/public/imported_attachments/1/2011-05-05, 15_19_18.JPG)
                  ![2011-05-05, 15_19_18.JPG_thumb](/public/imported_attachments/1/2011-05-05, 15_19_18.JPG_thumb)

                  1 Reply Last reply Reply Quote 0
                  • E
                    eri--
                    last edited by

                    just choose on squid loopback interface and modify your floating rule to say from 127.0.0.1/8 and not from WAN address without an interface selected.

                    1 Reply Last reply Reply Quote 0
                    • F
                      farrukhndm
                      last edited by

                      Browsing Strucked! after change given settings ????
                      i changed the rule
                      1)Squid on Loopback interface
                      2)Floating from 127.0.0.1/8
                      3)Firewall LAN Enabling Rule as in attached image
                      4)Firewall LAN Disabling Rule as in attached image

                      ![2011-05-05, 16_34_54.jpg](/public/imported_attachments/1/2011-05-05, 16_34_54.jpg)
                      ![2011-05-05, 16_34_54.jpg_thumb](/public/imported_attachments/1/2011-05-05, 16_34_54.jpg_thumb)
                      ![2011-05-05, 16_35_08.jpg](/public/imported_attachments/1/2011-05-05, 16_35_08.jpg)
                      ![2011-05-05, 16_35_08.jpg_thumb](/public/imported_attachments/1/2011-05-05, 16_35_08.jpg_thumb)
                      ![2011-05-05, 16_35_15.jpg](/public/imported_attachments/1/2011-05-05, 16_35_15.jpg)
                      ![2011-05-05, 16_35_15.jpg_thumb](/public/imported_attachments/1/2011-05-05, 16_35_15.jpg_thumb)
                      ![2011-05-05, 16_35_34.jpg](/public/imported_attachments/1/2011-05-05, 16_35_34.jpg)
                      ![2011-05-05, 16_35_34.jpg_thumb](/public/imported_attachments/1/2011-05-05, 16_35_34.jpg_thumb)
                      ![2011-05-05, 16_35_39.jpg](/public/imported_attachments/1/2011-05-05, 16_35_39.jpg)
                      ![2011-05-05, 16_35_39.jpg_thumb](/public/imported_attachments/1/2011-05-05, 16_35_39.jpg_thumb)
                      ![2011-05-05, 16_37_53.JPG](/public/imported_attachments/1/2011-05-05, 16_37_53.JPG)
                      ![2011-05-05, 16_37_53.JPG_thumb](/public/imported_attachments/1/2011-05-05, 16_37_53.JPG_thumb)

                      1 Reply Last reply Reply Quote 0
                      • H
                        heper
                        last edited by

                        also add a floating rule for dns …..

                        out tcp/udp dest_port 53  GW:loadbalance

                        1 Reply Last reply Reply Quote 0
                        • F
                          farrukhndm
                          last edited by

                          Don't affect,

                          If i only use  LoopBack interface in Squid ,browsing dosn't work,so i have to use Both LAN+Loopback. Also apply DNs Rule on Floating but no affect.

                          What i perceive now, No One can done Failover for Default Gateway !!! Am i right .

                          Where are the Pfsense Developers ??? they have placed feature of Load balancing .Please Guide us in how to achieve Failover +Squid

                          regards

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.