• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Resolved Pfsense 2.0 RC1 LoadBalacing, But Non Default Gateway Failover Working?

Scheduled Pinned Locked Moved 2.0-RC Snapshot Feedback and Problems - RETIRED
17 Posts 6 Posters 8.5k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • F
    farrukhndm
    last edited by May 5, 2011, 10:44 AM Apr 23, 2011, 11:38 AM

    2.0-RC1 (i386)
    built on Sat Feb 26 15:30:26 EST 2011

    I have 2 ISP WAN connection
    LAN =192.168.1.3
    WAN1=204.87.11.3/29  ;GW 204.87.11.3
    WAN2=206.98.11.30/30 ;Gw 206.98.11.29
    DNS Server=8.8.8.8
    DNS Server=4.4.4.4
    (Above IPs are Dummies)

    System: Gateway Groups

    Group Name Gateways Priority Description

    Wan1BalanceWan2 OPT1GW WANGW  Tier 1  Tier 1

    WAN1FailoverWan2 OPT1GW   WANGW Tier 2  Tier 1

    WAN2FailoverWAN1 OPT1GW   WANGW Tier 1 Tier 2

    Name             Interface Gateway                Monitor IP

    OPT1GW    (default) OPT1     206.98.11.29  8.8.8.8(DNS)

    WANGW                WAN    204.87.11.3 4.4.4.4

    When i add given rules to my LAN ,My All network goes down and Voip Application stop working ???????? :(
    3) Firewall: Rules

    • LAN net * * * * Wan1BalanceWan2   Default allow LAN to any rule

    Please guide Whats wrong.. its almost 15 days passed to get
    1.jpg
    1.jpg_thumb
    2.0.jpg
    2.0.jpg_thumb
    3.JPG
    3.JPG_thumb
    4.jpg
    4.jpg_thumb
    4.1.jpg
    4.1.jpg_thumb
    5.JPG
    5.JPG_thumb

    1 Reply Last reply Reply Quote 0
    • N
      Nachtfalke
      last edited by Apr 23, 2011, 12:51 PM

      Hi,

      it is not necessary to create the two groups WAN1failoverWAN2 and WAN2failoverWAN1 for failover. This was in 1.2.3.

      In 2.0 you enter the Tier-Lever. equal levels do load balancing and if one line goes down it automatically switches over to the other line and vice versa.

      In your firewall rule you only added TCP as protocol. Try to use here "any" oder "TCP/UDP". As far as I know, VoIP is using UDP like many other "realtime applications".
      If LoadBalancing is working on your configuration try
      http://www.pfsense.org/ip.php
      Try refreshing the site several time and take a look, if the IP changes.

      But remember not all protocols are able to use LoadBalancing:
      http://doc.pfsense.org/index.php/Multi_WAN_/_Load_Balancing#Set_up_useful_aliases

      Or you try "Sticky connections" under "SYSTEM -> ADVANCED" and there I think "NETWORK".

      1 Reply Last reply Reply Quote 0
      • S
        skear
        last edited by Apr 23, 2011, 4:14 PM Apr 23, 2011, 4:13 PM

        You might also want to take a look under Status\Gateways and make sure both gateways have a status of online.

        And when you add the LAN rule to direct traffic to Wan1BalanceWan2 you should delete the other default lan rule.  So in your screenshot delete the rule with a description "default allow LAN to any rule".

        Check out my pfSense guides

        1 Reply Last reply Reply Quote 0
        • N
          Nachtfalke
          last edited by Apr 24, 2011, 8:55 PM

          @skear:

          You might also want to take a look under Status\Gateways and make sure both gateways have a status of online.

          Right.

          And when you add the LAN rule to direct traffic to Wan1BalanceWan2 you should delete the other default lan rule.  So in your screenshot delete the rule with a description "default allow LAN to any rule".

          Not correct at all. In the screenshot this rule is disabled and so it is ok.

          1 Reply Last reply Reply Quote 0
          • S
            skear
            last edited by Apr 24, 2011, 11:24 PM

            And when you add the LAN rule to direct traffic to Wan1BalanceWan2 you should delete the other default lan rule.  So in your screenshot delete the rule with a description "default allow LAN to any rule".

            Not correct at all. In the screenshot this rule is disabled and so it is ok.

            Ahh you're right, I did not notice it was disabled.

            Check out my pfSense guides

            1 Reply Last reply Reply Quote 0
            • F
              farrukhndm
              last edited by Apr 26, 2011, 5:32 AM Apr 26, 2011, 5:14 AM

              Still No success of loadBalacning ,When I download some file it always Go to default Gateway rather Using Wan1BalcningWan2.
              pleas check corresponding logs .

              Gateways.JPG_thumb
              ![download speed.JPG_thumb](/public/imported_attachments/1/download speed.JPG_thumb)
              ![download speed.JPG](/public/imported_attachments/1/download speed.JPG)
              DNS.JPG_thumb
              DNS.JPG
              2.JPG
              1.JPG_thumb
              Gateways.JPG
              2.JPG_thumb
              1.JPG

              1 Reply Last reply Reply Quote 0
              • N
                Nachtfalke
                last edited by Apr 26, 2011, 9:51 AM

                Your firewall rule seems to be wrong for my understanding.
                Why did you enter port 8080 as destination ?
                This means, that this rule only works for destination addresses with port 8080. Normal http (80) or https (443) will not be applied to this rule.

                Further I think you totally misunderstood LoadBalancing (or I did with your question).

                LoadBalancing does NOT mean, that you have double speed. It does NOT double DSL1 (2MBit/s) and DSL2 (5MBit/s) to one line with 7MBit/s. It will just help you to load the balance over these two lines. If you start two downloads, one will downloading over DSL1 with 2MBit/s and the othr will downloading over DSL2 with 5Mbit/s.

                You could test if your loadbalancing is working while surfing to this page and refresh this page several times after another
                http://www.pfsense.org/ip.php
                Then you will see, that your IP changes (DSL1 <-> DSL2). But before this will work you have to correct your firewall rule (destination port to any).

                Another good site to test ist maps.google.com and zoom in and out. Than you can see that bothe lines will use LoadBalancing.

                1 Reply Last reply Reply Quote 0
                • F
                  farrukhndm
                  last edited by Apr 27, 2011, 1:30 PM

                  Forum pfsense

                  Your firewall rule seems to be wrong for my understanding.
                  Why did you enter port 8080 as destination ?

                  On port 8080 My Squid is listening,So i just route traffic with outbound request for 8080.I think its correct. Further also checked destination to <any>but it doesn't impact of load balancing .
                  After changing destination port to <any>in firewall rule
                  when i check the Ip ,it always uses the WAN IP whose Gateway is set to default

                  http://www.pfsense.org/ip.php
                  Your IP is 2xx.xxx.xxx.130
                  Your IP is 2xx.xxx.xxx.130
                  Your IP is 2xx.xxx.xxx.130
                  Your IP is 2xx.xxx.xxx.130
                  Your IP is 2xx.xxx.xxx.130

                  (Still my Load balancing of traffic is not working ???????)

                  LoadBalancing does NOT mean, that you have double speed. It does NOT double DSL1 (2MBit/s) and DSL2 (5MBit/s) to one line with 7MBit/s

                  Yes i was thinking wrong that load balancing double speed of your WAN Links,so its clear know.
                  Is there any way to double speed of my WAN Links in pfsense ???

                  Further what i observe,All traffic goes through the Default gateway rather going from Wan1BalanceWan2
                  I put all load but all traffic passing to interface which is set default.

                  please guide me whats next???

                  pf-01.JPG
                  pf-01.JPG_thumb
                  pf-02.JPG
                  pf-02.JPG_thumb
                  pf-01.JPG
                  pf-01.JPG_thumb
                  pf-02.JPG
                  pf-02.JPG_thumb</any></any>

                  1 Reply Last reply Reply Quote 0
                  • N
                    Nachtfalke
                    last edited by Apr 27, 2011, 7:09 PM

                    Do both of your WAN connections are in the same subnet / having the same gateway ?
                    If you can answer this with "yes", then it doesn't work without a trick.

                    LoadBalancing at the moment only works, if both WANs have different gateways.

                    1 Reply Last reply Reply Quote 0
                    • F
                      farrukhndm
                      last edited by Apr 28, 2011, 9:32 AM

                      WAN1 Gateway and WAN2 Gatway are different with differnent subnets but ISP is same.its mean DNS are same which makes no differance .

                      Still No Clue where i am wrong in configuring LoadBalancing.

                      Why my traffic goes to Default gateways rather than going from Ladbalcing (Group Gateway)???

                      1 Reply Last reply Reply Quote 0
                      • F
                        farrukhndm
                        last edited by Apr 28, 2011, 3:08 PM

                        One thing that i miss to told you i am running Proxy Squid ,And i think squid always route traffic through Default gateway ?????

                        Here is another Thread that explain how to squid traffic load balancing

                        http://forum.pfsense.org/index.php/topic,33895.0.html

                        But still i am facing problem with error

                        Connection to Failed
                        The system returned:

                        (49) Can't assign requested address

                        Please please help me help me ..

                        1 Reply Last reply Reply Quote 0
                        • ?
                          Guest
                          last edited by Apr 28, 2011, 4:07 PM

                          To effectively double your speed, you would need to use BGP or something similar. I'm going through the process of setting this up where I work, we have a paired T1 line giving us 3mbps, and a single T1 @ 1.5mbps.

                          Pfsense has a BGP package, but I couldn't tell you how to set it up, we're relying on our ISP to configure this for us.

                          1 Reply Last reply Reply Quote 0
                          • F
                            farrukhndm
                            last edited by May 5, 2011, 10:43 AM

                            Hi,
                            WanGw(Default)
                            OptGw()
                            Please get screen shots of My Pfsense 2.0 RC1 with Squid Load Balacing working , failover Work only when Non Defult GatewaysI(OptGw) in My Routes goes down.
                            When My Default Gateway(WANGw) goes down.My Internet Stop working ???? Any help.

                            Squid Still send its traffic to defult gateway ?????? is there any way to Fully working fail over if Default gateway goes down

                            ![2011-05-05, 12_17_00.jpg](/public/imported_attachments/1/2011-05-05, 12_17_00.jpg)
                            ![2011-05-05, 12_17_00.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_17_00.jpg_thumb)
                            ![2011-05-05, 12_17_04.jpg](/public/imported_attachments/1/2011-05-05, 12_17_04.jpg)
                            ![2011-05-05, 12_17_04.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_17_04.jpg_thumb)
                            ![2011-05-05, 12_17_36.jpg](/public/imported_attachments/1/2011-05-05, 12_17_36.jpg)
                            ![2011-05-05, 12_17_36.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_17_36.jpg_thumb)
                            ![2011-05-05, 12_17_50.jpg](/public/imported_attachments/1/2011-05-05, 12_17_50.jpg)
                            ![2011-05-05, 12_17_50.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_17_50.jpg_thumb)
                            ![2011-05-05, 12_17_55.jpg](/public/imported_attachments/1/2011-05-05, 12_17_55.jpg)
                            ![2011-05-05, 12_17_55.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_17_55.jpg_thumb)
                            ![2011-05-05, 12_28_23.jpg](/public/imported_attachments/1/2011-05-05, 12_28_23.jpg)
                            ![2011-05-05, 12_28_23.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_28_23.jpg_thumb)
                            ![2011-05-05, 12_29_10.jpg](/public/imported_attachments/1/2011-05-05, 12_29_10.jpg)
                            ![2011-05-05, 12_29_10.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_29_10.jpg_thumb)
                            ![2011-05-05, 15_10_21.jpg](/public/imported_attachments/1/2011-05-05, 15_10_21.jpg)
                            ![2011-05-05, 15_10_21.jpg_thumb](/public/imported_attachments/1/2011-05-05, 15_10_21.jpg_thumb)
                            ![2011-05-05, 15_10_30.jpg](/public/imported_attachments/1/2011-05-05, 15_10_30.jpg)
                            ![2011-05-05, 15_10_30.jpg_thumb](/public/imported_attachments/1/2011-05-05, 15_10_30.jpg_thumb)
                            ![2011-05-05, 15_19_18.JPG](/public/imported_attachments/1/2011-05-05, 15_19_18.JPG)
                            ![2011-05-05, 15_19_18.JPG_thumb](/public/imported_attachments/1/2011-05-05, 15_19_18.JPG_thumb)

                            1 Reply Last reply Reply Quote 0
                            • E
                              eri--
                              last edited by May 5, 2011, 11:13 AM

                              just choose on squid loopback interface and modify your floating rule to say from 127.0.0.1/8 and not from WAN address without an interface selected.

                              1 Reply Last reply Reply Quote 0
                              • F
                                farrukhndm
                                last edited by May 5, 2011, 11:47 AM

                                Browsing Strucked! after change given settings ????
                                i changed the rule
                                1)Squid on Loopback interface
                                2)Floating from 127.0.0.1/8
                                3)Firewall LAN Enabling Rule as in attached image
                                4)Firewall LAN Disabling Rule as in attached image

                                ![2011-05-05, 16_34_54.jpg](/public/imported_attachments/1/2011-05-05, 16_34_54.jpg)
                                ![2011-05-05, 16_34_54.jpg_thumb](/public/imported_attachments/1/2011-05-05, 16_34_54.jpg_thumb)
                                ![2011-05-05, 16_35_08.jpg](/public/imported_attachments/1/2011-05-05, 16_35_08.jpg)
                                ![2011-05-05, 16_35_08.jpg_thumb](/public/imported_attachments/1/2011-05-05, 16_35_08.jpg_thumb)
                                ![2011-05-05, 16_35_15.jpg](/public/imported_attachments/1/2011-05-05, 16_35_15.jpg)
                                ![2011-05-05, 16_35_15.jpg_thumb](/public/imported_attachments/1/2011-05-05, 16_35_15.jpg_thumb)
                                ![2011-05-05, 16_35_34.jpg](/public/imported_attachments/1/2011-05-05, 16_35_34.jpg)
                                ![2011-05-05, 16_35_34.jpg_thumb](/public/imported_attachments/1/2011-05-05, 16_35_34.jpg_thumb)
                                ![2011-05-05, 16_35_39.jpg](/public/imported_attachments/1/2011-05-05, 16_35_39.jpg)
                                ![2011-05-05, 16_35_39.jpg_thumb](/public/imported_attachments/1/2011-05-05, 16_35_39.jpg_thumb)
                                ![2011-05-05, 16_37_53.JPG](/public/imported_attachments/1/2011-05-05, 16_37_53.JPG)
                                ![2011-05-05, 16_37_53.JPG_thumb](/public/imported_attachments/1/2011-05-05, 16_37_53.JPG_thumb)

                                1 Reply Last reply Reply Quote 0
                                • H
                                  heper
                                  last edited by May 5, 2011, 4:12 PM

                                  also add a floating rule for dns …..

                                  out tcp/udp dest_port 53  GW:loadbalance

                                  1 Reply Last reply Reply Quote 0
                                  • F
                                    farrukhndm
                                    last edited by May 6, 2011, 11:14 AM

                                    Don't affect,

                                    If i only use  LoopBack interface in Squid ,browsing dosn't work,so i have to use Both LAN+Loopback. Also apply DNs Rule on Floating but no affect.

                                    What i perceive now, No One can done Failover for Default Gateway !!! Am i right .

                                    Where are the Pfsense Developers ??? they have placed feature of Load balancing .Please Guide us in how to achieve Failover +Squid

                                    regards

                                    1 Reply Last reply Reply Quote 0
                                    1 out of 17
                                    • First post
                                      1/17
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                      This community forum collects and processes your personal information.
                                      consent.not_received