From owner-freebsd-pf@FreeBSD.ORG Wed Jan 18 10:17:07 2006 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A614616A422 for ; Wed, 18 Jan 2006 10:17:07 +0000 (GMT) (envelope-from lists@wm-access.no) Received: from lakepoint.domeneshop.no (lakepoint.domeneshop.no [194.63.248.54]) by mx1.FreeBSD.org (Postfix) with ESMTP id EFDC043D48 for ; Wed, 18 Jan 2006 10:17:04 +0000 (GMT) (envelope-from lists@wm-access.no) Received: from [192.168.9.8] (gw1.arcticwireless.no [80.203.184.14]) (authenticated bits=0) by lakepoint.domeneshop.no (8.13.4/8.13.4) with ESMTP id k0IAH3nQ027937 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Wed, 18 Jan 2006 11:17:03 +0100 Message-ID: <43CE159D.6070000@wm-access.no> Date: Wed, 18 Jan 2006 11:17:01 +0100 From: =?ISO-8859-1?Q?Sten_Daniel_S=F8rsdal?= User-Agent: Thunderbird 1.5 (Windows/20051201) MIME-Version: 1.0 To: Josh Finlay References: <025201c61a86$2e7383e0$0600a8c0@delta> <006801c61c0c$7e1aaae0$0600a8c0@delta> In-Reply-To: <006801c61c0c$7e1aaae0$0600a8c0@delta> X-Enigmail-Version: 0.94.0.0 OpenPGP: id=D6F56A9B Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enigB607EE19A3CE250B4AAD545E" Cc: freebsd-pf@freebsd.org Subject: Re: Multiple DSL lines, load sharing / shaping X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Jan 2006 10:17:07 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enigB607EE19A3CE250B4AAD545E Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Josh Finlay wrote: > Hi, >=20 > Took a good look at that link, sounds like it might do the trick. >=20 > However I am curious about something... > We have 5x 512kbps SDSL lines. > Totalling 2560kbps. > Is there any possible way to "bind" these lines together to make use of= > a full 2560kbps at once? Because with the round-robin method, it will > pick a random address from the pool (in this case, one of the 5 lines) > and utilize that which will only achieve 512kbps at a maximum. I have > heard of extremely expensive cisco solutions to do similar to this, but= I used ipfw's "fwd" with "prob" to max out 2 x 2mbit lines back when v4.8/9/10 was released . It takes some effort to get Just Right (tm) but it can be done. Tips: Do not use keep-state on the fwd rules (infact you might want to try to avoid ipfw for the actual filtering), NAT or multiple providers breaks things too. I had to avoid using fast-forwarding but this might be better now. > we've already forked out enough on hardware and connections so we're > trying to do this part a bit cheaper. Oh haven't we all, that's why we started saving up for the luxury of testing configurations before rolling them, even with something so comfortably flexible as FreeBSD. :P~~ --=20 Sten Daniel S=F8rsdal --------------enigB607EE19A3CE250B4AAD545E Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFDzhWdMvOF8Nb1apsRApYVAJwL9jZwGEQcn6LgXXNan8U3JSh01ACfWKl0 LTT92fQocNvPyI3PhbOnBmc= =EEEF -----END PGP SIGNATURE----- --------------enigB607EE19A3CE250B4AAD545E--