Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 2 Feb 2005 08:02:39 -0500
From:      "Gustafson, Tim" <tjg@meitech.com>
To:        "Thomas Foster" <tbonius@comcast.net>
Cc:        questions@freebsd.org
Subject:   RE: Routing Problem
Message-ID:  <DA749670ABB17C4994D03B34889179D8228A9F@fee.meitech.com>

next in thread | raw e-mail | index | archive | help
This is a multi-part message in MIME format.

------=_NextPart_000_007D_01C508FD.90BE0ED0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

Thomas (and John too),

Let me clarify a little bit.

What I have is this:

A single FreeBSD web server with a single NIC in it
Two T1 routers, each with a different subnet.

My FreeBSD box has two IP addresses assigned to it, one from the first
subnet and one from the second subnet.

I want to use round-robin DNS to direct half my web traffic to the first
IP and half to the second IP.

As I said to John in a private e-mail earlier this morning, I have a
Windows 2000 box that is doing exactly this with these two subnets right
now.  I know it "can" be done.  I have a feeling that the FreeBSD TCP
stack lacks the capability.  By the way, this also works with Cisco
hardware.  I have used Cisco equipment in this same configuration in the
past.

I think they way it SHOULD work is that you should be able to give a
FreeBSD box multiple default gateways.  When FreeBSD gets a packet to an
IP on the first subnet, it should use the default gateway that is also
on that subnet.  When FreeBSD gets a packet to an IP on the second
subnet, it should use the second default gateway.  This seems to be the
logic that Windows (and Cisco) uses.

Tim Gustafson
MEI Technology Consulting, Inc
tjg@meitech.com
(516) 379-0001 Office
(516) 480-1870 Mobile/Emergencies
(516) 908-4185 Fax
http://www.meitech.com/ 



-----Original Message-----
From: Thomas Foster [mailto:tbonius@comcast.net]
Sent: Wednesday, February 02, 2005 7:57 AM
To: Gustafson, Tim
Cc: questions@freebsd.org
Subject: Re: Routing Problem


Hi Tim..

If you have multiple interfaces and you configure a default gateway for
each 
interface, the default metric determination that is based on the speed
of 
the interface usually uses the fastest interface for default gateway 
traffic. This is usually desirable in configurations in which the
computer 
is connected to the same network.

This behavior can become a problem when the computer exists on two or
more 
disjointed networks (networks that do not provide symmetric reachability
on 
layer3). Symmetric reachability exists when packets can be sent to and 
received from an arbitrary destination.

Because the TCP/IP version4 protocol uses a single default route in 
FreeBSD's routing table at any one time for default route traffic,
default 
routers configured on multiple interfaces connected to two or more 
disjointed networks can wreak routing traffic havoc.

 In FreeBSD, you can manually configure the routing table for the
individual 
interfaces..  but it sounds to me as if you are attempting to use two 
ethernet interfaces connected to two disjointed networks connected to 
routers with two seperate subnets in order to balance http requests to
one 
server.. is this the case?  I guess I am not fully understanding your 
configuration ...

T.


----- Original Message ----- 
From: "Gustafson, Tim" <tjg@meitech.com>
To: "Thomas Foster" <tbonius@comcast.net>
Cc: <questions@freebsd.org>
Sent: Wednesday, February 02, 2005 4:06 AM
Subject: RE: Routing Problem


> Thomas,
>
> No, I'm not using this box as a router.  It is a web server, and I
need
> to spread the load of my web traffic across two separate T1s.
>
> I can't just add routes.  You need a default route, or parts of the
> internet would become inaccessible.  In my case, you need TWO default
> routes.  I have set up Cisco equipment and Windows workstations with
two
> default routes in the past, and it has worked.  In fact, I have one
> Windows box right now that is configured on both these networks with
two
> default gateways, and it is working.
>
> There has to be a way to make it work on FreeBSD.
>
> Tim Gustafson
> MEI Technology Consulting, Inc
> tjg@meitech.com
> (516) 379-0001 Office
> (516) 480-1870 Mobile/Emergencies
> (516) 908-4185 Fax
> http://www.meitech.com/
>
>
>
> -----Original Message-----
> From: Thomas Foster [mailto:tbonius@comcast.net]
> Sent: Wednesday, February 02, 2005 4:48 AM
> To: Gustafson, Tim
> Cc: questions@freebsd.org
> Subject: Re: Routing Problem
>
>
> Im confused.. if you have two T1s, then are using /30s dor the ranges?
> If
> so.. what about not giving a default gateway for either one and just
add
>
> routes...
>
> Are you attempting utilize this as just a router.?
>
> Theres a section that covers setting up routing on interfaces in the
> handbook:
>
>
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-routin
> g.html
>
> Hope this helps
>
> T
> ----- Original Message ----- 
> From: "Gustafson, Tim" <tjg@meitech.com>
> To: <freebsd-questions@freebsd.org>
> Sent: Tuesday, February 01, 2005 5:35 PM
> Subject: Routing Problem
>
>
>>I am having a problem setting up a multi-homed host.  I have two
>> separate T1 internet connections, and one physical NIC in my FreeBSD
>> box.  The two networks are as follows:
>>
>> Connection 1:
>> LAN Address: 1.2.3.24/25
>> Router Address: 1.2.3.1
>>
>> Connection 2:
>> LAN Address: 4.5.6.106/29
>> Router Address: 4.5.6.105
>>
>> I would like to set up my FreeBSD box so that I can connect to either
>> LAN address from the outside world.  The problem is that I cannot
>> specify two default gateways.  Right now, I have 1.2.3.1 set up as a
>> default gateway, and I can get to the 1.2.3.24 IP from the outside
>> world.  However, I can't get to 4.5.6.106.  I can't even ping it.
> From
>> the FreeBSD box, I can ping 4.5.6.105, and from the outside world I
> can
>> ping 4.5.6.105, but I can't ping 4.5.6.106 from the outside world.
>>
>> Is there any way to make this work?  How can I make FreeBSD have two
>> default gateways?  I read somewhere about being able to set up source
>> routing, but I haven't been able to find any HOWTO's about that.
>>
>> Any help is greatly appreciated.
>>
>
>
> 



------=_NextPart_000_007D_01C508FD.90BE0ED0
Content-Type: application/x-pkcs7-signature;
	name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
	filename="smime.p7s"
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------=_NextPart_000_007D_01C508FD.90BE0ED0--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?DA749670ABB17C4994D03B34889179D8228A9F>