From owner-freebsd-hackers Fri Dec 7 10:19:49 2001 Delivered-To: freebsd-hackers@freebsd.org Received: from boreas.isi.edu (boreas.isi.edu [128.9.160.161]) by hub.freebsd.org (Postfix) with ESMTP id 970D737B419 for ; Fri, 7 Dec 2001 10:19:45 -0800 (PST) Received: from isi.edu (5703av6xnjmedhdj@hbo.isi.edu [128.9.160.75]) by boreas.isi.edu (8.11.6/8.11.2) with ESMTP id fB7IJEN20558; Fri, 7 Dec 2001 10:19:14 -0800 (PST) Message-ID: <3C110822.5020302@isi.edu> Date: Fri, 07 Dec 2001 10:19:14 -0800 From: Lars Eggert User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:0.9.6) Gecko/20011203 X-Accept-Language: en, de MIME-Version: 1.0 To: Nick Rogness Cc: Steve Ames , Anders Hagman , freebsd-hackers@FreeBSD.ORG Subject: Re: Nat through two DSL References: Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Nick Rogness wrote: > Load sharing is not possible on a per packet basis when running > NAT on the outside interfaces. The source address for each packet > will be different. What prevents you from picking one source address for packets going out both interfaces? Your return packets won't be striped then of course. (Which could make this scheme ineffective, assuming "client" machines receive much more than they send.) (Aside: Whether or not NAT is present is orthogonal to striping, just assume the NAT box is the source/sink for all traffic.) > On a per session basis, you may be able to work with ipfw fwd > (which does policy based forwarding) and the ipfw probability work > done by Luigi. man ipfw for more info. I didn't know about that, thanks for the pointer! I use ipfw strictly as a firewall :-) Lars -- Lars Eggert Information Sciences Institute http://www.isi.edu/larse/ University of Southern California To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message