Is this possible with pfSense?

Striker

Hey,

I just wanted to ask you guys if the following is possible (and if so, how)…

pfSense #1:
2x (sucky) WAN (both DHCP, get disconnected every 24h)
1x LAN

pfSense #2:
1x (superb) WAN (multiple static IP addresses)

Goal:
Use both connections to connect to pfSense #2 and browse the interwebs with its superb connection (at the speed of both _pfSense #1_s sucky connections combined).

PS:

darnitol

[shakes magic 8-ball]. . . Don't count on it

heper

possibly possible, but a waste of time. its pointless to use #2

Striker

@darnitol:

[shakes magic 8-ball]. . . Don't count on it

What information are you missing?

@heper:

possibly possible, but a waste of time. its pointless to use #2

I wouldn't say pointless, since it would give you the benefits of having a static IP address and probably faster speeds when there's only one connection to an external server established… :o

heper

i don't see how you could gain any speed difference. pfsense loadbalancing systems works on a round-robin basis –> therefor you will only benefit with dealing with multiple sessions, for example torrents

dhatz

I think what you want to do is called VPN-bonding (aka VPN-trunking), e.g. http://www.peplink.com/technology/vpn-bonding/

I've done something similar with OpenVPN under Linux but I'm not sure if it's doable with pfSense and webGUI…

jimp

Not doable yet. We've discussed it several times, general consensus is that eventually we'll whip up some sort of bonded VPN using MPD so it would work like MLPPP does. Either directly, or layered on top of something like OpenVPN.

We've looked into things like LACP+GIF/GRE or LACP+OpenVPN tap and they didn't work or had various drawbacks that were just not worth the effort.

Striker

@dhatz:

I think what you want to do is called VPN-bonding (aka VPN-trunking), e.g. http://www.peplink.com/technology/vpn-bonding/

I've done something similar with OpenVPN under Linux but I'm not sure if it's doable with pfSense and webGUI…

Thanks for the keywords! Those will come in handy!

@jimp:

Not doable yet. We've discussed it several times,

Would have used the forum's search function, but had no keywords to look for before dhatz' post. :-X
@jimp:

general consensus is that eventually we'll whip up some sort of bonded VPN using MPD so it would work like MLPPP does. Either directly, or layered on top of something like OpenVPN.

That would be awesome! But let me guess, it's not top of your list of features to implement, right? :'(
@jimp:

We've looked into things like LACP+GIF/GRE or LACP+OpenVPN tap and they didn't work or had various drawbacks that were just not worth the effort.

:-\

Edit: I did some research on the internet and it seems that the ISP needs to somehow support MLPPP in order for it to work. Also, isn't this exactly what we're / I'm looking for? :P

Striker

Hate to bump threads, but

So, are there any updates on this? :-X