From owner-freebsd-questions@FreeBSD.ORG Thu Dec 4 08:27:22 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 13ABB16A4D0 for ; Thu, 4 Dec 2003 08:27:22 -0800 (PST) Received: from web40302.mail.yahoo.com (web40302.mail.yahoo.com [66.218.78.81]) by mx1.FreeBSD.org (Postfix) with SMTP id 417D343FDF for ; Thu, 4 Dec 2003 08:27:20 -0800 (PST) (envelope-from m_evmenkin@yahoo.com) Message-ID: <20031204162719.62941.qmail@web40302.mail.yahoo.com> Received: from [24.52.242.150] by web40302.mail.yahoo.com via HTTP; Thu, 04 Dec 2003 08:27:19 PST Date: Thu, 4 Dec 2003 08:27:19 -0800 (PST) From: Maksim Yevmenkin To: questions@freebsd.org, net@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Subject: how to force packets to go out on a specific interface X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Dec 2003 16:27:22 -0000 Dear Hackers, is there a way to force packets to go out on a specific interface based on a source IP address? here is what we want: for testing purposes we have a FreeBSD box with two 100Mbit NICs (em0 and em1). both NICs are on the the same subnet 172.1.1.x/23. both NICs are connected to the ServerIron. the purpose of the setup is to get 200Mbit link between FreeBSD and ServerIron. ethernet trunking is NOT an option. it seems ServerIron uses algorithm that selects physical port in the trunk based on source and destination IP. IPs do not change during the test, so one NIC gets more traffic then another (we only have few clients that talk to the FreeBSD box). so what is really required is: if a process was bound to 172.1.1.1 (em0) then the packets should go out on em0 and if process was bound to 172.1.1.2 (em1) then packets should go out on em1. we tried ipfw(8) "forward" and it did not do what we want. Linux can handle this via "ip route foo bar" thing where we can specify which local source address should go out on which interface. one more thing: the solution must be compatible with dummynet(4). thanks, max __________________________________ Do you Yahoo!? Free Pop-Up Blocker - Get it now http://companion.yahoo.com/