From owner-freebsd-pf@FreeBSD.ORG Wed Jan 18 12:42:21 2006 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id BED3016A41F for ; Wed, 18 Jan 2006 12:42:21 +0000 (GMT) (envelope-from lists@wm-access.no) Received: from lakepoint.domeneshop.no (lakepoint.domeneshop.no [194.63.248.54]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1173843D4C for ; Wed, 18 Jan 2006 12:42:20 +0000 (GMT) (envelope-from lists@wm-access.no) Received: from [192.168.9.8] (gw1.arcticwireless.no [80.203.184.14]) (authenticated bits=0) by lakepoint.domeneshop.no (8.13.4/8.13.4) with ESMTP id k0ICgJjw013267 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Wed, 18 Jan 2006 13:42:20 +0100 Message-ID: <43CE37A9.1000707@wm-access.no> Date: Wed, 18 Jan 2006 13:42:17 +0100 From: =?ISO-8859-1?Q?Sten_Daniel_S=F8rsdal?= User-Agent: Thunderbird 1.5 (Windows/20051201) MIME-Version: 1.0 To: Josh Finlay References: <025201c61a86$2e7383e0$0600a8c0@delta> <006801c61c0c$7e1aaae0$0600a8c0@delta> <43CE159D.6070000@wm-access.no> <007b01c61c22$120ebf60$0600a8c0@delta> <43CE2FE1.3020303@wm-access.no> <009101c61c29$38736000$0600a8c0@delta> In-Reply-To: <009101c61c29$38736000$0600a8c0@delta> X-Enigmail-Version: 0.94.0.0 OpenPGP: id=D6F56A9B Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enigA0EAF6066DE33511360C67B2" Cc: freebsd-pf@freebsd.org Subject: Re: Multiple DSL lines, load sharing / shaping X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Jan 2006 12:42:21 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enigA0EAF6066DE33511360C67B2 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Moving to private only. >> Is it even possible in PF? >=20 > I have no idea ;-) I don't think it is. >=20 >> Are you talking about a webserver on your end and IP1 meaning an user >> from the internet? Or the other way around? >=20 > No sorry the other way around. IP1 is one of our lines, and by web > server I mean any webserver on the internet. >=20 >> And are you using NAT? >=20 > Yes. I was hoping to implement a round-robin NAT as described by anothe= r > reply to my original post. Providing it all works as I would like it to= =2E Aha! Then you should instead either prefer to use PF or IPFW fwd with keep-state. What you need is to make sure all traffic from one session leaves the right pipe. I mentioned that NAT breaks packet perfect forwarding. >=20 >> That can be accomplished if you want. >> What do you prefer? "packet perfect" forwarding for maximum throughput= >> on your uploads or stream friendly balancing - and perhaps better >> overall performance - for many users? >=20 > Better overall performance for end users. There is a network of 30 > workstations, all in active use about 16hrs of each day. I'd say PF or IPFW with fwd + keepstate will be the way you want to go. Not the way i initially mentioned. >=20 >> Have you ever considered multilink ppp? >=20 > multilink ppp? hmm that is definately something I may have to look into= =2E > Infact from memory of waht I know about it, it could possibly be exactl= y > what I am looking for. > Do you have much experience with multilink ppp that you could pass on > before I jump in blindfolded and bring my whole network down? ;-) Not really. --=20 Sten Daniel S=F8rsdal --------------enigA0EAF6066DE33511360C67B2 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFDzjepMvOF8Nb1apsRAtkXAJwJakXxIwmkcL18dXroHlnH/QpQ4QCeI8Se TrlwNxYzFHwZ94Q7GFiChG0= =ypam -----END PGP SIGNATURE----- --------------enigA0EAF6066DE33511360C67B2--