Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 25 Jan 2006 12:26:19 -0800
From:      Jon Simola <jon@abccomm.com>
To:        FreeBSD MailList <subscriber@osk.com.ua>
Cc:        freebsd-net@freebsd.org
Subject:   Re: Failover and load balancing using advanced NAT daemon
Message-ID:  <8eea04080601251226g752113e4qe815fbb5de7648fb@mail.gmail.com>
In-Reply-To: <831122596.20060125184424@osk.com.ua>
References:  <831122596.20060125184424@osk.com.ua>

next in thread | previous in thread | raw e-mail | index | archive | help
On 1/25/06, Oleg Tarasov <subscriber@osk.com.ua> wrote:

> First three functions would be great to be implemented inside one
> daemon like standart natd. Packets should be diverted into it. This
> daemon can easily perform all of the tasks listed above as all of the
> packets are passed through it.
>
> Using it in a combination with policy-routing would be a powerful
> mechanism!

You may want to check out PF, the packet filter imported from OpenBSD.
I have it running on some large routers doing NAT out multiple
interfaces, load balancing and policy routing. Careful use of anchors
and some scripting (or ifstated which might be in ports) can move
traffic off failed links or respond to changing loads.

I've done a lot with both ipfw and PF now, and I'm finding PF to be
more flexible for my uses.

--
Jon Simola
Systems Administrator
ABC Communications



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?8eea04080601251226g752113e4qe815fbb5de7648fb>