PfSense 2.1 Floating rules for Multi Wan doesn't work.

Smithes

I setup Multi-WAN like shown in the official tutorial…. Works only for Connections without squid. And works very fine. But I also need squid. So I installed the squid 3.3-dev package from the package-list, because squid supports the "radom" command since 3.2.
I know it is a dev-package, but I run it on a wlan-network with 5000 Users on peek and its runs very fine. Also with squidguard.
I also know that there is no failover for squid, if one of the lines will be offline, but that is not important for me, because the two lines are from the same provider and come over the same cable. It’s a cable internet connection from unitymedia(Germany).

I added these lines, for split the traffic to two lines. *1

acl fiftyPercent random 0.5
tcp_outgoing_address 192.0.2.1 fiftyPercent
tcp_outgoing_address 192.0.2.2

*1: The information’s found here: http://wiki.squid-cache.org/Features/AclRandom
greets Smithes

thanhk43

i am using 2.1.5-RELEASE and squid 2.7.9 pkg v.4.3.4 and have the same issue, squid only work with defaul gateway, anyone have any idea ?

Kababayan

Work around will be too easy if you are using virtual, in fact there are lot of ways with virtual setup.

alxbob

Does acl random provide failover if one gateway is down?

firatnemis

If all the modems has got the same speed what should write custom options for equal speed ?

@ruggero:

first install squid3-dev from available packages.

++++++in this way you can use configuration directive acl random .
from squid doc :
changes in 3.2 acl : random

New type random. Pseudo-randomly match requests based on a configured probability .

now you can do all the configuration you need for multiwan in Custom options - Custom setting of proxy server.

in my situation ( 3 wan ) :

"
acl venticinque random 1/4
acl settantacinquediv2 random 0.5

tcp_outgoing_address 192.168.4.254 venticinque

tcp_outgoing_address 192.168.3.254 settantacinquediv2

tcp_outgoing_address 192.168.2.254

"

192.168.4.254 = ipv4 address wan 1
192.168.3.254 = ipv4 address wan 2
192.168.2.254 = ipv4 address wan 3

random 1/4 = 25 % = wan1 25% of traffic
random 0.5 = (100-25)/2 = wan2 37,5 % of traffic
else = wan3 37,5 % of traffic

i do this because my 3 wan are not equal.

in case of 2 wan :

"
acl cinquanta random 0.5

tcp_outgoing_address 192.168.4.254 cinquanta

tcp_outgoing_address 192.168.2.254

"

you do not need extra rule on firewall ( floating rule ) .
Also it bypass gateway groups.

mesro09

hello Everybody
is there anyone to help with explanation about multiwan with squid 3.4 non transparent (working with wpad)
many thanks