From owner-freebsd-questions@FreeBSD.ORG Tue May 19 19:22:13 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 537F8BB2 for ; Tue, 19 May 2015 19:22:13 +0000 (UTC) Received: from mail-ig0-x236.google.com (mail-ig0-x236.google.com [IPv6:2607:f8b0:4001:c05::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 1F6AD1A69 for ; Tue, 19 May 2015 19:22:13 +0000 (UTC) Received: by igbhj9 with SMTP id hj9so42479469igb.1 for ; Tue, 19 May 2015 12:22:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=QgELs7exPp+g+Ulv2xmhUaoNF4Cs2sa69Cbx9yTwZHo=; b=Jr0dw1j58DgpvmzKxS8mKe0R4erKGmd6gOqvDxu3w/nPlR1guHuq0qJ7uCyUoVL90w Ac7QdLRrxzJEZHetLZac0uqynf04qWNnsL9NC3Sm/hMzxUZamR1U77bc29CthT6uBZ3n Y6wZrA50OQkacSZVnCpa8ccMLNrgXE2+FRzxWWorI47X3qQOZckeyGDL52tOwxfu42/K XWWXZnlZ9XX9eN77m/IdviJvJebBRjhWd+9jrLtLuXVtejQgg/UUCHuo99pkU/m8XgUF WUTSEP2arkSckUha7ELEayR5aMfmSCgnJINTu7h+SCsqNrbNlnyrEmrPdDXuVR73lptV cO3Q== MIME-Version: 1.0 X-Received: by 10.42.50.81 with SMTP id z17mr7561734icf.57.1432063332350; Tue, 19 May 2015 12:22:12 -0700 (PDT) Received: by 10.36.141.135 with HTTP; Tue, 19 May 2015 12:22:12 -0700 (PDT) Date: Tue, 19 May 2015 12:22:12 -0700 Message-ID: Subject: Asymmetric routing with FreeBSD on Amazon EC2 within VPC From: Patrick Gibson To: FreeBSD Questions Mailing List Content-Type: text/plain; charset=UTF-8 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 May 2015 19:22:13 -0000 I'm wondering if anyone has managed to figure out a way to have an Amazon EC2 instance behind a VPC work with multiple public IP addresses? The issue is with asymmetric routing. It's been resolved in the Linux world (http://blog.bluemalkin.net/multiple-ips-and-enis-on-ec2-in-a-vpc/), but I can't seem to get it working under FreeBSD. Using the setfib command, I'm able to manually go out through either interface, but for incoming packets to a webserver that listens to both interfaces, no dice. :( Patrick