From owner-freebsd-questions@FreeBSD.ORG Sun Oct 9 11:38:30 2011 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 025E1106564A for ; Sun, 9 Oct 2011 11:38:30 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from smtp.infracaninophile.co.uk (smtp6.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3fd3:cd67:fafa:3d78]) by mx1.freebsd.org (Postfix) with ESMTP id 60CB48FC14 for ; Sun, 9 Oct 2011 11:38:29 +0000 (UTC) Received: from seedling.black-earth.co.uk (seedling.black-earth.co.uk [81.187.76.163]) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.14.5/8.14.5) with ESMTP id p99BcPqD077940 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NO); Sun, 9 Oct 2011 12:38:26 +0100 (BST) (envelope-from m.seaman@infracaninophile.co.uk) X-DKIM: Sendmail DKIM Filter v2.8.3 smtp.infracaninophile.co.uk p99BcPqD077940 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=infracaninophile.co.uk; s=201001-infracaninophile; t=1318160306; bh=ljd6YOtbk6l982c0IpJg406YPD2eXGUZgYisvzk8mc8=; h=Message-ID:Date:From:MIME-Version:To:CC:Subject:References: In-Reply-To:Content-Type:Cc:Content-Type:Date:From:In-Reply-To: Message-ID:Mime-Version:References:To; z=Message-ID:=20<4E9187AC.6000006@infracaninophile.co.uk>|Date:=20S un,=2009=20Oct=202011=2012:38:20=20+0100|From:=20Matthew=20Seaman= 20|User-Agent:=20Mozilla/5.0=20(M acintosh=3B=20Intel=20Mac=20OS=20X=2010.6=3B=20rv:7.0.1)=20Gecko/2 0110929=20Thunderbird/7.0.1|MIME-Version:=201.0|To:=20pepe=20|CC:=20freebsd-questions@freebsd.org|Subject:=20Re:=2 0two=20networks=20in=20one=20server?|References:=20|In-Reply-T o:=20|X-Enigmail-Version:=201.3.2|OpenPGP:=20id=3D60AE908C|Con tent-Type:=20multipart/signed=3B=20micalg=3Dpgp-sha1=3B=0D=0A=20pr otocol=3D"application/pgp-signature"=3B=0D=0A=20boundary=3D"------ ------enig81454CDBC736671A1E03FC18"; b=0AGDsln3mluywLHhlb9qFnOtwWxwv0MTNUzGQBcDH6OhSfe5iwhrCCPv3yoI//C4K zYKzjR1Iw5vvrRyHzzvN+6NsR1fyBsoSwCXsYj0FdysGSeCXdNWeqgEznvGYTTt/7M NjevyemIxWkmDP1FM9z40VaZeTgrmJ9QaKqyHVco= Message-ID: <4E9187AC.6000006@infracaninophile.co.uk> Date: Sun, 09 Oct 2011 12:38:20 +0100 From: Matthew Seaman User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:7.0.1) Gecko/20110929 Thunderbird/7.0.1 MIME-Version: 1.0 To: pepe References: In-Reply-To: X-Enigmail-Version: 1.3.2 OpenPGP: id=60AE908C Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig81454CDBC736671A1E03FC18" X-Virus-Scanned: clamav-milter 0.97.2 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-0.1 required=5.0 tests=BAYES_20,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,SPF_FAIL autolearn=no version=3.3.2 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on lucid-nonsense.infracaninophile.co.uk Cc: freebsd-questions@freebsd.org Subject: Re: two networks in one server? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 09 Oct 2011 11:38:30 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig81454CDBC736671A1E03FC18 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable On 09/10/2011 10:36, pepe wrote: > I'm just asking before trying if it possible to use two network uplinks= in > one server so other would be just backup way in? > I have currently connection from two ISPs and server is up with one > connection. Is it possible to add another nic and wire that to connecti= on > from another isp? So isp 1 would be in normal use in/out, but isp 2 cou= ld be > used connecting in? This is a very commonly asked question around the Internet. The answer is -- it's a lot harder to do properly than you might think. Requires understanding Internet routing protocols like BGP and you will need the cooperation of both ISPs to make it all work. However there is a "light" version which might work for you. Keywords here are "policy based routing." In this case you can use firewall software to forward packets by an alternate gateway. This only affects the outward path from your system: no good at all if all the incoming traffic is using an uplink that fails, but you can use it to load balance across multiple links. Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate JID: matthew@infracaninophile.co.uk Kent, CT11 9PW --------------enig81454CDBC736671A1E03FC18 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.16 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk6Rh7EACgkQ8Mjk52CukIzObQCdGmQyMBEKb/+Z/IXa/5Rydt6n iw8An1jAga/RvqHtkRLh7XD6J1KU5juD =t2mN -----END PGP SIGNATURE----- --------------enig81454CDBC736671A1E03FC18--