• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Resolved Pfsense 2.0 RC1 LoadBalacing, But Non Default Gateway Failover Working?

Scheduled Pinned Locked Moved 2.0-RC Snapshot Feedback and Problems - RETIRED
17 Posts 6 Posters 8.5k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • N
    Nachtfalke
    last edited by Apr 23, 2011, 12:51 PM

    Hi,

    it is not necessary to create the two groups WAN1failoverWAN2 and WAN2failoverWAN1 for failover. This was in 1.2.3.

    In 2.0 you enter the Tier-Lever. equal levels do load balancing and if one line goes down it automatically switches over to the other line and vice versa.

    In your firewall rule you only added TCP as protocol. Try to use here "any" oder "TCP/UDP". As far as I know, VoIP is using UDP like many other "realtime applications".
    If LoadBalancing is working on your configuration try
    http://www.pfsense.org/ip.php
    Try refreshing the site several time and take a look, if the IP changes.

    But remember not all protocols are able to use LoadBalancing:
    http://doc.pfsense.org/index.php/Multi_WAN_/_Load_Balancing#Set_up_useful_aliases

    Or you try "Sticky connections" under "SYSTEM -> ADVANCED" and there I think "NETWORK".

    1 Reply Last reply Reply Quote 0
    • S
      skear
      last edited by Apr 23, 2011, 4:14 PM Apr 23, 2011, 4:13 PM

      You might also want to take a look under Status\Gateways and make sure both gateways have a status of online.

      And when you add the LAN rule to direct traffic to Wan1BalanceWan2 you should delete the other default lan rule.  So in your screenshot delete the rule with a description "default allow LAN to any rule".

      Check out my pfSense guides

      1 Reply Last reply Reply Quote 0
      • N
        Nachtfalke
        last edited by Apr 24, 2011, 8:55 PM

        @skear:

        You might also want to take a look under Status\Gateways and make sure both gateways have a status of online.

        Right.

        And when you add the LAN rule to direct traffic to Wan1BalanceWan2 you should delete the other default lan rule.  So in your screenshot delete the rule with a description "default allow LAN to any rule".

        Not correct at all. In the screenshot this rule is disabled and so it is ok.

        1 Reply Last reply Reply Quote 0
        • S
          skear
          last edited by Apr 24, 2011, 11:24 PM

          And when you add the LAN rule to direct traffic to Wan1BalanceWan2 you should delete the other default lan rule.  So in your screenshot delete the rule with a description "default allow LAN to any rule".

          Not correct at all. In the screenshot this rule is disabled and so it is ok.

          Ahh you're right, I did not notice it was disabled.

          Check out my pfSense guides

          1 Reply Last reply Reply Quote 0
          • F
            farrukhndm
            last edited by Apr 26, 2011, 5:32 AM Apr 26, 2011, 5:14 AM

            Still No success of loadBalacning ,When I download some file it always Go to default Gateway rather Using Wan1BalcningWan2.
            pleas check corresponding logs .

            Gateways.JPG_thumb
            ![download speed.JPG_thumb](/public/imported_attachments/1/download speed.JPG_thumb)
            ![download speed.JPG](/public/imported_attachments/1/download speed.JPG)
            DNS.JPG_thumb
            DNS.JPG
            2.JPG
            1.JPG_thumb
            Gateways.JPG
            2.JPG_thumb
            1.JPG

            1 Reply Last reply Reply Quote 0
            • N
              Nachtfalke
              last edited by Apr 26, 2011, 9:51 AM

              Your firewall rule seems to be wrong for my understanding.
              Why did you enter port 8080 as destination ?
              This means, that this rule only works for destination addresses with port 8080. Normal http (80) or https (443) will not be applied to this rule.

              Further I think you totally misunderstood LoadBalancing (or I did with your question).

              LoadBalancing does NOT mean, that you have double speed. It does NOT double DSL1 (2MBit/s) and DSL2 (5MBit/s) to one line with 7MBit/s. It will just help you to load the balance over these two lines. If you start two downloads, one will downloading over DSL1 with 2MBit/s and the othr will downloading over DSL2 with 5Mbit/s.

              You could test if your loadbalancing is working while surfing to this page and refresh this page several times after another
              http://www.pfsense.org/ip.php
              Then you will see, that your IP changes (DSL1 <-> DSL2). But before this will work you have to correct your firewall rule (destination port to any).

              Another good site to test ist maps.google.com and zoom in and out. Than you can see that bothe lines will use LoadBalancing.

              1 Reply Last reply Reply Quote 0
              • F
                farrukhndm
                last edited by Apr 27, 2011, 1:30 PM

                Forum pfsense

                Your firewall rule seems to be wrong for my understanding.
                Why did you enter port 8080 as destination ?

                On port 8080 My Squid is listening,So i just route traffic with outbound request for 8080.I think its correct. Further also checked destination to <any>but it doesn't impact of load balancing .
                After changing destination port to <any>in firewall rule
                when i check the Ip ,it always uses the WAN IP whose Gateway is set to default

                http://www.pfsense.org/ip.php
                Your IP is 2xx.xxx.xxx.130
                Your IP is 2xx.xxx.xxx.130
                Your IP is 2xx.xxx.xxx.130
                Your IP is 2xx.xxx.xxx.130
                Your IP is 2xx.xxx.xxx.130

                (Still my Load balancing of traffic is not working ???????)

                LoadBalancing does NOT mean, that you have double speed. It does NOT double DSL1 (2MBit/s) and DSL2 (5MBit/s) to one line with 7MBit/s

                Yes i was thinking wrong that load balancing double speed of your WAN Links,so its clear know.
                Is there any way to double speed of my WAN Links in pfsense ???

                Further what i observe,All traffic goes through the Default gateway rather going from Wan1BalanceWan2
                I put all load but all traffic passing to interface which is set default.

                please guide me whats next???

                pf-01.JPG
                pf-01.JPG_thumb
                pf-02.JPG
                pf-02.JPG_thumb
                pf-01.JPG
                pf-01.JPG_thumb
                pf-02.JPG
                pf-02.JPG_thumb</any></any>

                1 Reply Last reply Reply Quote 0
                • N
                  Nachtfalke
                  last edited by Apr 27, 2011, 7:09 PM

                  Do both of your WAN connections are in the same subnet / having the same gateway ?
                  If you can answer this with "yes", then it doesn't work without a trick.

                  LoadBalancing at the moment only works, if both WANs have different gateways.

                  1 Reply Last reply Reply Quote 0
                  • F
                    farrukhndm
                    last edited by Apr 28, 2011, 9:32 AM

                    WAN1 Gateway and WAN2 Gatway are different with differnent subnets but ISP is same.its mean DNS are same which makes no differance .

                    Still No Clue where i am wrong in configuring LoadBalancing.

                    Why my traffic goes to Default gateways rather than going from Ladbalcing (Group Gateway)???

                    1 Reply Last reply Reply Quote 0
                    • F
                      farrukhndm
                      last edited by Apr 28, 2011, 3:08 PM

                      One thing that i miss to told you i am running Proxy Squid ,And i think squid always route traffic through Default gateway ?????

                      Here is another Thread that explain how to squid traffic load balancing

                      http://forum.pfsense.org/index.php/topic,33895.0.html

                      But still i am facing problem with error

                      Connection to Failed
                      The system returned:

                      (49) Can't assign requested address

                      Please please help me help me ..

                      1 Reply Last reply Reply Quote 0
                      • ?
                        Guest
                        last edited by Apr 28, 2011, 4:07 PM

                        To effectively double your speed, you would need to use BGP or something similar. I'm going through the process of setting this up where I work, we have a paired T1 line giving us 3mbps, and a single T1 @ 1.5mbps.

                        Pfsense has a BGP package, but I couldn't tell you how to set it up, we're relying on our ISP to configure this for us.

                        1 Reply Last reply Reply Quote 0
                        • F
                          farrukhndm
                          last edited by May 5, 2011, 10:43 AM

                          Hi,
                          WanGw(Default)
                          OptGw()
                          Please get screen shots of My Pfsense 2.0 RC1 with Squid Load Balacing working , failover Work only when Non Defult GatewaysI(OptGw) in My Routes goes down.
                          When My Default Gateway(WANGw) goes down.My Internet Stop working ???? Any help.

                          Squid Still send its traffic to defult gateway ?????? is there any way to Fully working fail over if Default gateway goes down

                          ![2011-05-05, 12_17_00.jpg](/public/imported_attachments/1/2011-05-05, 12_17_00.jpg)
                          ![2011-05-05, 12_17_00.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_17_00.jpg_thumb)
                          ![2011-05-05, 12_17_04.jpg](/public/imported_attachments/1/2011-05-05, 12_17_04.jpg)
                          ![2011-05-05, 12_17_04.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_17_04.jpg_thumb)
                          ![2011-05-05, 12_17_36.jpg](/public/imported_attachments/1/2011-05-05, 12_17_36.jpg)
                          ![2011-05-05, 12_17_36.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_17_36.jpg_thumb)
                          ![2011-05-05, 12_17_50.jpg](/public/imported_attachments/1/2011-05-05, 12_17_50.jpg)
                          ![2011-05-05, 12_17_50.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_17_50.jpg_thumb)
                          ![2011-05-05, 12_17_55.jpg](/public/imported_attachments/1/2011-05-05, 12_17_55.jpg)
                          ![2011-05-05, 12_17_55.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_17_55.jpg_thumb)
                          ![2011-05-05, 12_28_23.jpg](/public/imported_attachments/1/2011-05-05, 12_28_23.jpg)
                          ![2011-05-05, 12_28_23.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_28_23.jpg_thumb)
                          ![2011-05-05, 12_29_10.jpg](/public/imported_attachments/1/2011-05-05, 12_29_10.jpg)
                          ![2011-05-05, 12_29_10.jpg_thumb](/public/imported_attachments/1/2011-05-05, 12_29_10.jpg_thumb)
                          ![2011-05-05, 15_10_21.jpg](/public/imported_attachments/1/2011-05-05, 15_10_21.jpg)
                          ![2011-05-05, 15_10_21.jpg_thumb](/public/imported_attachments/1/2011-05-05, 15_10_21.jpg_thumb)
                          ![2011-05-05, 15_10_30.jpg](/public/imported_attachments/1/2011-05-05, 15_10_30.jpg)
                          ![2011-05-05, 15_10_30.jpg_thumb](/public/imported_attachments/1/2011-05-05, 15_10_30.jpg_thumb)
                          ![2011-05-05, 15_19_18.JPG](/public/imported_attachments/1/2011-05-05, 15_19_18.JPG)
                          ![2011-05-05, 15_19_18.JPG_thumb](/public/imported_attachments/1/2011-05-05, 15_19_18.JPG_thumb)

                          1 Reply Last reply Reply Quote 0
                          • E
                            eri--
                            last edited by May 5, 2011, 11:13 AM

                            just choose on squid loopback interface and modify your floating rule to say from 127.0.0.1/8 and not from WAN address without an interface selected.

                            1 Reply Last reply Reply Quote 0
                            • F
                              farrukhndm
                              last edited by May 5, 2011, 11:47 AM

                              Browsing Strucked! after change given settings ????
                              i changed the rule
                              1)Squid on Loopback interface
                              2)Floating from 127.0.0.1/8
                              3)Firewall LAN Enabling Rule as in attached image
                              4)Firewall LAN Disabling Rule as in attached image

                              ![2011-05-05, 16_34_54.jpg](/public/imported_attachments/1/2011-05-05, 16_34_54.jpg)
                              ![2011-05-05, 16_34_54.jpg_thumb](/public/imported_attachments/1/2011-05-05, 16_34_54.jpg_thumb)
                              ![2011-05-05, 16_35_08.jpg](/public/imported_attachments/1/2011-05-05, 16_35_08.jpg)
                              ![2011-05-05, 16_35_08.jpg_thumb](/public/imported_attachments/1/2011-05-05, 16_35_08.jpg_thumb)
                              ![2011-05-05, 16_35_15.jpg](/public/imported_attachments/1/2011-05-05, 16_35_15.jpg)
                              ![2011-05-05, 16_35_15.jpg_thumb](/public/imported_attachments/1/2011-05-05, 16_35_15.jpg_thumb)
                              ![2011-05-05, 16_35_34.jpg](/public/imported_attachments/1/2011-05-05, 16_35_34.jpg)
                              ![2011-05-05, 16_35_34.jpg_thumb](/public/imported_attachments/1/2011-05-05, 16_35_34.jpg_thumb)
                              ![2011-05-05, 16_35_39.jpg](/public/imported_attachments/1/2011-05-05, 16_35_39.jpg)
                              ![2011-05-05, 16_35_39.jpg_thumb](/public/imported_attachments/1/2011-05-05, 16_35_39.jpg_thumb)
                              ![2011-05-05, 16_37_53.JPG](/public/imported_attachments/1/2011-05-05, 16_37_53.JPG)
                              ![2011-05-05, 16_37_53.JPG_thumb](/public/imported_attachments/1/2011-05-05, 16_37_53.JPG_thumb)

                              1 Reply Last reply Reply Quote 0
                              • H
                                heper
                                last edited by May 5, 2011, 4:12 PM

                                also add a floating rule for dns …..

                                out tcp/udp dest_port 53  GW:loadbalance

                                1 Reply Last reply Reply Quote 0
                                • F
                                  farrukhndm
                                  last edited by May 6, 2011, 11:14 AM

                                  Don't affect,

                                  If i only use  LoopBack interface in Squid ,browsing dosn't work,so i have to use Both LAN+Loopback. Also apply DNs Rule on Floating but no affect.

                                  What i perceive now, No One can done Failover for Default Gateway !!! Am i right .

                                  Where are the Pfsense Developers ??? they have placed feature of Load balancing .Please Guide us in how to achieve Failover +Squid

                                  regards

                                  1 Reply Last reply Reply Quote 0
                                  11 out of 17
                                  • First post
                                    11/17
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                    This community forum collects and processes your personal information.
                                    consent.not_received