From owner-freebsd-pf@FreeBSD.ORG Wed Jul 9 10:06:24 2008 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 7C1F6106566B for ; Wed, 9 Jul 2008 10:06:24 +0000 (UTC) (envelope-from leccine@gmail.com) Received: from fg-out-1718.google.com (fg-out-1718.google.com [72.14.220.158]) by mx1.freebsd.org (Postfix) with ESMTP id 0098D8FC0A for ; Wed, 9 Jul 2008 10:06:23 +0000 (UTC) (envelope-from leccine@gmail.com) Received: by fg-out-1718.google.com with SMTP id l26so1595055fgb.35 for ; Wed, 09 Jul 2008 03:06:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to :subject:in-reply-to:mime-version:content-type:references; bh=v7lnKPcaeXjLPvwmZc1Qb+ErwSsUDwxhaz8rFB0tpg0=; b=H67+M02FNd22BnmEPDBsLDgTrGUIoV3w8w+te5C2l8r/HEHUKVMyyp9A6pw/64NjJI Kht7SyiX1U9z//Qo38tWMNPiXQ4kK4+2nJpT+tgIURhubkk0FAOIKCnRprt3bX1yOLMv XA/0WNJwu3rjRe51spC/Gi0mj0Am8d+RbKZtg= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:in-reply-to:mime-version :content-type:references; b=NW6H4ZStISlj67TyuKQUUb1el0xCcvl98QEqlAOONKIqL38hgO2fyLmx+DFhrORaTA oZ+OSZ2WzOfm8/Kwr06Qrct/4U4wAjphdTWBA8Dx+s1nEqCgEhajA+AoXs/RvSsqshmb FMkbbHIRVfcg+YK3PTQjPG/zbBnrgSF6VqXXs= Received: by 10.86.83.2 with SMTP id g2mr6679927fgb.54.1215596417738; Wed, 09 Jul 2008 02:40:17 -0700 (PDT) Received: by 10.86.86.10 with HTTP; Wed, 9 Jul 2008 02:40:17 -0700 (PDT) Message-ID: Date: Wed, 9 Jul 2008 10:40:17 +0100 From: "=?ISO-8859-1?Q?Istv=E1n_Szuk=E1cs?=" To: freebsd-pf@freebsd.org In-Reply-To: <6E7521247AB3F04685C35F382AADE1B123932C7967@UXCHANGE7-2.UoA.auckland.ac.nz> MIME-Version: 1.0 References: <6E7521247AB3F04685C35F382AADE1B123932C7967@UXCHANGE7-2.UoA.auckland.ac.nz> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: Re: Suggestions on how to do Layer 2 load balacing with PF X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jul 2008 10:06:24 -0000 hi! http://people.freebsd.org/~mlaier/sucon.pdf CARP Supports layer 2 load balancing (ARP based) cheers On Wed, Jul 9, 2008 at 8:14 AM, Mark Pagulayan wrote: > Hi Guys, > > I was just wondering if anyone of you have done layer 2 load balancing with > PF. > > We tried to load balance traffic between two bridge firewall through OSPF, > by putting equal weights on the router ports. But the problem we encountered > is that when packet exits FW1 ( a state is created) it returns to FW2, the > packet gets drop because the state created on FW1 has not yet synced on FW2. > > We did this experiment because the firewall starts to drop packets when > packet rates reach 30Kp/s hoping that we load balance it, we can distribute > traffic to the firewalls. And just for information where a using a Gig > interface (em) > > I wanted to ask if anyone of you have done load balancing on layer2 and > how they have done it. > > Your help guys would be mostly appreciated. > > Best Regards, > > Mark > _______________________________________________ > freebsd-pf@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-pf > To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org" > -- the sun shines for all