[FUGSPBR] Source routing & load balance no OpenBSD 3.6

[William Armstrong]

opa belesma  

tente  utilizar o exemplo que tem no  manual do PF pra load balance

lan_net = "10.10.10.0/24"
wifi_net = "192.168.0.0/24"
int_if  = "rl0"
wi_if = "rl1"
ext_if1 = "xl0"
ext_if2 = "rl2"
ext_gw1 = "ip gateway externo frame relay"
ext_gw2 = "ip gateway externo speedy bussness"

#  nat outgoing connections on each internet interface
nat on $ext_if1 from $lan_net to any -> ($ext_if1)
nat on $ext_if2 from $lan_net to any -> ($ext_if2)

nat on $ext_if1 from $wifi_net to any -> ($ext_if1)
nat on $ext_if2 from $wifi_net to any -> ($ext_if2)

#  default deny
block in  from any to any
block out from any to any

#  pass all outgoing packets on internal interface
pass out on $int_if from any to $lan_net

pass out on $wi_if from any to $wifi_net

#  pass in quick any packets destined for the gateway itself
pass in quick on $int_if from $lan_net to $int_if

pass in quick on $wi_if from $wifi_net to $wi_if

#  load balance outgoing tcp traffic from internal network. 
pass in on $int_if route-to \
    { ($ext_if1 $ext_gw1), ($ext_if2 $ext_gw2) } round-robin \
    proto tcp from $lan_net to any flags S/SA modulate state

pass in on $int_if route-to \
    { ($ext_if1 $ext_gw1), ($ext_if2 $ext_gw2) } round-robin \
    proto tcp from $wifi_net to any flags S/SA modulate state


#  load balance outgoing udp and icmp traffic from internal network
pass in on $int_if route-to \
    { ($ext_if1 $ext_gw1), ($ext_if2 $ext_gw2) } round-robin \
    proto { udp, icmp } from $lan_net to any keep state

pass in on $int_if route-to \
    { ($ext_if1 $ext_gw1), ($ext_if2 $ext_gw2) } round-robin \
    proto { udp, icmp } from $wifi_net to any keep state


#  general "pass out" rules for external interfaces
pass out on $ext_if1 proto tcp from any to any flags S/SA modulate state
pass out on $ext_if1 proto { udp, icmp } from any to any keep state
pass out on $ext_if2 proto tcp from any to any flags S/SA modulate state
pass out on $ext_if2 proto { udp, icmp } from any to any keep state

#  route packets from any IPs on $ext_if1 to $ext_gw1 and the same for
#  $ext_if2 and $ext_gw2
pass out on $ext_if1 route-to ($ext_if2 $ext_gw2) from $ext_if2 to any 
pass out on $ext_if2 route-to ($ext_if1 $ext_gw1) from $ext_if1 to any 

 
estas seriam as regras  basica s de load balance  para as redes usarem
em conjunto os  2 links   so faltaria  adicionar a regras  para a
hospedagem do servidor  web  se ele vai ser no proprio micro ou em um
servidor separado.

-- 
-=-=-=-=-=-=-=-=-=-
William David Armstrong
Bio Systems Security.
ICQ 10253747 MSN bio__wolf em hotmail.com
_______________________________________________________________
Para enviar um novo email para a lista: fugspbr em fugspbr.org
Sair da Lista: http://lists.fugspbr.org/listinfo.cgi
Historico: http://www4.fugspbr.org/lista/html/FUG-BR/