Load balancing and DNS issues

[eric]

Hey guys

I currently have load balancing setup and seemingly working by following the guide on the wiki.  However I am having an issued with DNS not working properly.

My setup now thats (half) working is this: In System->General I have set one DNS server from each ISP into the list, and turned off "Allow DNS servers to be overridden".  Static routes for each server set to the correct gateway.  DNS forwarder turned on, and registering all DHCP clients.  Now I also have to set a rule to allow DNS out the default gateway or else it won't work.

The reason I said this is half working is because when both connections are up, the Internet works perfectly, however, if I take one of them down (doesn't matter which one) I lose all DNS.  I have also tried with the DNS forwarder turned off, however I would really like it on because I use it all the time.

Does anybody have any insight as to what I may be doing wrong?

Thanks
-Eric

[Mercredi]

may be you shouldnt use static routes for DNS servers? use policy-based routing.

[jeroen234]

he MUST use static routes pfsense itself can't use the  policy-based routing
so it needs a static route to the dns servers so that it can still find them when the wan or the opt1 interface is down

[eric]

so i do need static routes.. but im still having issues.  if i take one of the interfaces offline i still loose all DNS whatsoever, all external, and internal.

any ideas?

[sullrich]

Then your static routes are not defined correctly.

From a shell do a netstat -rn

You should see the dns ip address entry with a next hop gateway ip assigned.

Also try to traceroute from a shell to the dns ip.  Is it going out the correct gateway?

[eric]

thanks scott

netstat -rn does not show either dns ip address.  traceroute works fine on one dns ip address and not the other (sends out the same interface both times)

my DNS servers are as follows
Telus: 154.11.128.187
Uniserve: 216.113.192.3

gateways are as follow:
Telus: 66.183.128.254
Uniserve: 216.210.98.1

Static routes are as follows:
Interface    Network                    Gateway
Wan2        154.11.128.187/32      66.183.128.254
Wan          216.113.192.3/32        216.210.98.1

Does that look right?

Thanks again
-Eric

[sullrich]

@eric:

thanks scott

netstat -rn does not show either dns ip address.  traceroute works fine on one dns ip address and not the other (sends out the same interface both times)

It should… If it is not then there lies the problem I suspect.