From owner-freebsd-questions@FreeBSD.ORG Mon Jul 29 13:52:04 2013 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id D556E53D for ; Mon, 29 Jul 2013 13:52:04 +0000 (UTC) (envelope-from lconrad@go2france.com) Received: from omx1.hctc.net (omx1.hctc.net [69.4.62.74]) by mx1.freebsd.org (Postfix) with ESMTP id B67202775 for ; Mon, 29 Jul 2013 13:52:03 +0000 (UTC) Received: from hctc.net (unknown [69.4.62.44]) by omx1.hctc.net (Postfix) with ESMTP id B91D311480 for ; Mon, 29 Jul 2013 08:43:26 -0500 (CDT) X-Default-Received-SPF: pass (skip=loggedin (res=PASS)) x-ip-name=69.4.54.186; From: lconrad@go2france.com To: Subject: Re: 2 lines Date: Mon, 29 Jul 2013 08:43:15 -0500 Message-ID: <51f67173.42f.28e1f100.59197860@go2france.com> MIME-Version: 1.0 X-Originating-IP: 69.4.54.186 X-Mailer: SurgeWeb - Ajax Webmail Client X-Authenticated-User: lconrad@go2france.com Content-Type: text/plain; charset=us-ascii; format=flowed X-Content-Filtered-By: Mailman/MimeDel 2.1.14 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jul 2013 13:52:04 -0000 On Monday 29/07/2013 at 8:14 am, "Zyumbilev, Peter" wrote: > Hi, > > I have 2 fiber lines and using pfsense(freebsd) I can easily use them > for backup of LAN --> Internet traffic i.e when primary is down, > second > line kick in automatically. However when one line is down all > connections Internet --> LAN to certain service(e.g www) via that > connection are down as expected. > > My question is: is there some smart(e.g DNS) solution that can help me > overcome this ? DNS works at a higher layer that physical connections, so cannot be the solution, but may be required in a solution. fail-over for WAN link failure is the solution. For DNS, if you're running public domain named services and you cannot bring up the backup WAN link on the same IP as the failed primary, then you'll have to dynamically update the domain names with new A record. Len