Hi folks,
 
Has been several days I am going throught this but I couldn't make it to work.
 
this is my current scenario:
 
E1 pipe
      |
cisco 3620 with wccp
      |
  switch1 --------- squid transparent server
      |
    eth1
linux bridge with htb bw management per IP
    eth0
      |
  switch2
      |
class C routed network to clients
 
I want to modify this adding an ADSL connetcion (dynamic IP address) in to the network. I would like to have fail over but not load balancing, I will decide if a single ip gets routed by default gw or to the adsl connection. Beside that I would like to keep the transparent proxy.
 
Problems I am facing to are:
 
1. connection routed to adsl connection must be natted the other one not
2. how to manage the upload bw (no problem for download because I can shape on eth0)
3. keep the transparent proxy for both connections.
 
we are trying two different aproaches:
 
E1 pipe                  ADSL pipe
   |                                  |
cisco 3620                bb router
   |                                  |
   -----------------------------------
                    |
               switch1
                    |
       linux router with iptables (maybe wccp? or simply port redirection)
                   |
               switch2---squid transparent server
                   |
               class c routed network segment
 
that leaves out the bw management wich **I NEED** unless I can find an efficient way to mark squid packets with their original source IP.
 
the other idea:
 
E1 pipe                  ADSL pipe
   |                                  |
cisco 3620                      |
   |                                  |
  eth1                            eth2(ppp0)
    ----------linux router---------
  eth0                            eth3
     |                                 |
     |                         squid transparent server
     |
class c routed network segment
 
that has exponential complications and needs to find a machine that can support 4 eth cards without errors.
 
Any suggestion on the linux and/or the general design? This thing is driving me crazy.
 
Thanks in advance
 
Alfredo Giordano
 
 

Reply via email to