Thanks a lot for your reply.
--On 19. Mai 2005 16:35:28 +0200 Daniel Hartmeier <[EMAIL PROTECTED]> wrote:
a) do the per-packet balancing on a dedicated box statelessly upstream of the stateful firewall
I Think I'll stick with this option
b) write a patch that does per-packet balancing within one state entry (it's mostly a configuration syntax difficulty, you have to deal with people wanting to balance per-state only, per-packet only, and across n interfaces per-state and then across <n per-packet for each state, i.e. syntax needs to allow TWO interface lists, if you want a generally usable solution).
c) use something else to balance the packets
I won't say your case of 'very few connections generating so many packets that they need balancing' is hypothetical, but it's certainly uncommon. Most people will have a smaller packets/connection rate and per-connection balancing works well enough.
I am running a vpn solution over the link
Daniel
pgps0YC9xEObR.pgp
Description: PGP signature
