Multi WAN load balancing issue
-
I have 3 WAN connection with load balancing config but the problem is when you login ( 1st request ) to a good secure website it saved your IP a.a.a.a but bad thing happen when the 2nd request go thourght pfsense 3 WAN load balancing config with another ip b.b.b.b it will….disconnect with last login ID and you have to login again again and again.
ANY HELP :( !!!
-
You can enable this:
**System > Advanced > Miscellaneous
Load Balancing, Use Sticky Connections**
Successive connections will be redirected to the servers in a round-robin manner with connections from the same source being sent to the same web server. This "sticky connection" will exist as long as there are states that refer to this connection. Once the states expire, so will the sticky connection. Further connections from that host will be redirected to the next web server in the round robin. Changing this option will restart the Load Balancing service.Might make things better, might make things worse, depending.
It will bind a source IP address to a given gateway while there are active states from it so load balancing capabilities are reduced.
-
You can enable this:
**System > Advanced > Miscellaneous
Load Balancing, Use Sticky Connections**
Successive connections will be redirected to the servers in a round-robin manner with connections from the same source being sent to the same web server. This "sticky connection" will exist as long as there are states that refer to this connection. Once the states expire, so will the sticky connection. Further connections from that host will be redirected to the next web server in the round robin. Changing this option will restart the Load Balancing service.Might make things better, might make things worse, depending.
It will bind a source IP address to a given gateway while there are active states from it so load balancing capabilities are reduced.
Maybe another not bad answer ( i thought ) is route connection to that good secure website go on 1 gateway in firewall rule ? how do you think ? ^^
-
Yes, that is another option if you can reliably identify all the traffic.
