Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 05 Feb 2017 11:30:12 +0100
From:      Robert Eckardt <rol@Robert-Eckardt.de>
To:        freebsd-questions@freebsd.org
Subject:   A simple routing question
Message-ID:  <33a14dcd9e8e9897c49e045e1606bdb1@Robert-Eckardt.de>

next in thread | raw e-mail | index | archive | help
Hi all,

currently I'm trying to solve a problem that, as I see from
studying the archives, pops up on and off again. Yet, I was
unable to find a solution.

The SITUATION:
A local network connects to the internet using two providers
with routers (AVM FritzBox) that do the IPv4-NATing and a
server (FreeBSD 11.0-RELEASE with RADIX_MPATH und ipfw) as
part of the inner firewall (see the illustration below).

                     Internet
                    /        \
                   /          \
     1.1.2.3--Provider1    Provider2--2.2.3.4
ns.provider1.de  |            |  ns.provider2.de
                  |            |
         www.domain1.de    www.domain2.de
                  |            |
             1.1.1.123     2.2.2.234
               Router1      Router2
              10.0.0.1     10.0.0.2
                  |            |
                  +---+--------+
                      |
                   10.0.0.3
                    Server
                  10.10.0.1
                      |
                     LAN

The default routes of Server point to both routers and static
routes are defined e.g. for the respective name servers.

The PROBLEM:
Requests to domain1 are answred correctly, requests to domain2
try their way via Router1 as ECMP routing does not take into
account, where the connection originated from.
However, packets of connections coming in via Router2 must
also be returned via Router2.
(I mainly care for TCP, but UDP would also be interesting.)

The QUESTION:
Is there a solution to this scenario in FreeBSD?

Please help me and other people seeking a solution to solve this
problem by describing a way to configure the server appropriately
or show that the problem cannot be solved in the given setting.

Regards,
Robert




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?33a14dcd9e8e9897c49e045e1606bdb1>