On Thu, May 19, 2005 at 02:44:22PM +0200, Manon Goo wrote:
> I am not loadbalancing between dioffernet pathes.
>
> Both lines are attached to the same Router at my ISP. My ISP does per-packet
> loadbalnacing on the down stream. I need to do per packet loadbalancing on
> the Upstream
There's no such option in pf. You can
a) do the per-packet balancing on a dedicated box statelessly upstream
of the stateful firewall
b) write a patch that does per-packet balancing within one state entry
(it's mostly a configuration syntax difficulty, you have to deal
with people wanting to balance per-state only, per-packet only, and
across n interfaces per-state and then across <n per-packet for
each state, i.e. syntax needs to allow TWO interface lists, if you
want a generally usable solution).
c) use something else to balance the packets
I won't say your case of 'very few connections generating so many
packets that they need balancing' is hypothetical, but it's certainly
uncommon. Most people will have a smaller packets/connection rate and
per-connection balancing works well enough.
Daniel
