From owner-freebsd-pf@FreeBSD.ORG Tue Dec 5 08:06:02 2006 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 338B216A412 for ; Tue, 5 Dec 2006 08:06:02 +0000 (UTC) (envelope-from teknet8@o2.pl) Received: from rekin22.go2.pl (rekin22.go2.pl [193.17.41.11]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2775643CA8 for ; Tue, 5 Dec 2006 08:05:23 +0000 (GMT) (envelope-from teknet8@o2.pl) Received: from o2.pl (unknown [10.0.0.76]) by rekin22.go2.pl (Postfix) with SMTP id 558FD45C012 for ; Tue, 5 Dec 2006 09:06:00 +0100 (CET) From: =?UTF-8?Q?"teknet8"?= To: freebsd-pf@freebsd.org Mime-Version: 1.0 Message-ID: <179cfa74.46ad9551.45752868.5314d@o2.pl> Date: Tue, 05 Dec 2006 09:06:00 +0100 X-Originator: 83.13.242.82 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Subject: load balancing and sticky address X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Dec 2006 08:06:02 -0000 Hello =20 I=20would=20like=20to=20use=20smart=20sticky=20address=20fuction. The=20problem=20is: =20 table=20=20{=2010.0.0.1,=2010.0.0.2,=2010.0.0.3=20} rdr=20on=20xl0=20inet=20proto=20tcp=20from=20any=20to=20IP=5FPUBLICO=20po= rt=2080=20->=20{=20=20} round-robin=20sticky-address pass=20in=20quick=20log=20on=20xl0=20proto=20tcp=20from=20any=20to=20= =20port=2080=20flags=20S/SA modulate=20state=20(src.track=201800) =20 I=20want=20to=20remember=20old=20(finished)=20sessions=20traces=20for=203= 0=20minutes,=20and do=20the=20same=20decision=20in=20load=20balancing=20for=20that=2030=20mi= nutes. =20 Problem=20is=20when=20one=20of=20the=20destination=20hosts=20fail. If=20clientA=20is=20using=2010.0.0.2=20and=2010.0.0.2=20fails=20sticky=20= address=20option will=20force=20pf=20to=20route=20traffic=20from=20clientA=20to=2010.0.0.2= =20for=20next=2030=20minutes. =20 How=20can=20i=20solve=20such=20problem=20? =20 Is=20the=20exactly=20the=20same=20problem=20as=20described=20in: http://archives.neohapsis.com/archives/openbsd/2006-05/2815.html =20 =20=20 Thanx Michal