Multi WAN Load Balancing does not work on 2.5.0



  • My apologies if this is a newbie question, quite fresh user of pfSense.

    I recently build a firewall (using old Dell R320) and (maybe my mistake) decided to use recent development version of 2.5 branch. Currently using version: 2.5.0.a.20200729.0650, but problem described here been for multiple 2.5.x versions I tried.

    So idea is simple - have 1 x LAN, 2 x WAN connections from different ISPs.
    Goal - get WAN to be Load Balanced, as well as fail-over. Quite reasonable in now days with many people working from home I assume.

    Tried to follow documentation to setup multi WAN with Load Balancing
    https://docs.netgate.com/pfsense/en/latest/book/multiwan/summary-of-multi-wan-requirements.html

    What I have done:

    1. Two WAN Connections created with static IPv4 assigned by ISP providers
    2. Gateway Group is created with both WAN connections set to Tier1
    3. In System / Routing / Gateways - added Monitor IP for each gateway
    4. In System / General Setup - Added public DNS for each Gateway (1.1.1.1 for one & 9.9.9.9 for second)
    5. In Firewall / Rules / LAN - Edited default rule for IPv4 protocol setting Gateway to Gateway Group created at step #2.
    6. In System / Routing / Gateways - changed Default gateway IPv4 to Gateway Group created at step #2.
      --

    Both WAN connections shows green and online

    Tried to test (from client machine on the network):

    1. curl http://icanhazip.com - does not matter how many times run, still connection goes over WAN1 and I get a public IP of WAN1.
    2. start multiple 4K/8K Youtube streams, on client machine on LAN, seems all still go through WAN1

    Tried to watch different YouTube videos, went through forum, documentation - it seems that should work, but still does not.
    Before I go back and downgrade it back toto 2.4.x instead of staying on bleeding edge, wanted to see if any advice from community could point on what I am missing here. So any advice will be greatly appreciated.

    P.S. Submitted a bug request here, but was redirected to forum
    https://redmine.pfsense.org/issues/10800



  • @diff Experiencing the same issue here with 2.5.0. Had to revert back to 2.4.5 p1 to get multi wan load balancing to work again.



  • @diff Just curious if you ever resolved this? Any kind of policy based routing ignores the gateway specified -- also gateway groups -- which I think is what you encountered. All traffic leaves out the system gateway no matter what. As soon as I revert back to 2.4.5 it works again.


  • Rebel Alliance Developer Netgate

    Please show more details of your configuration, including, but not limited to:

    • Gateway configuration
    • Gateway group configuration
    • Gateway status
    • Gateway group status
    • Details of an affected rule in the GUI
    • Contents of /tmp/rules.debug, at a minimum:
      • The lines showing the definition of the Gateway
      • The lines showing the definition of the Gateway group
      • The lines showing the definition of a rule using the gateway group


  • @ensnare said in Multi WAN Load Balancing does not work on 2.5.0:

    @diff Just curious if you ever resolved this? Any kind of policy based routing ignores the gateway specified -- also gateway groups -- which I think is what you encountered. All traffic leaves out the system gateway no matter what. As soon as I revert back to 2.4.5 it works again.

    @ensnare - did not solve that yet, had too many important deliverables at work, and since my PFSense server also acts as PXE, have to move whole tftp around, which require good chunk of dedicated time



  • Just an update as of 9/4/2020 -- policy based routing where the gateway is a load-balanced group still does not work in 2.5. I tried upgrading again last night -- also did a fresh install -- and all traffic leaves the primary ISP. I had to revert back to 2.4.5.



  • I have a problem like this.
    Two WAN connections, one static and other DHCP.
    WAN DHCP is my main connection and works normally alone.
    I did all the configuration to work with failover but when I disconnect the DHCP WAN the other WAN does not go up.
    I have little knowledge in pfSense so there is probably a problem with the configuration.


Log in to reply