RE: [pfSense Support] Load balancer

2009-02-07 Thread Hiren Joshi
Where can I find details about the pfsense balancer? Things like how a
request is handled and config options maybe even a howto?

 -Original Message-
 From: Gary Buckmaster [mailto:g...@centipedenetworks.com] 
 Sent: 06 February 2009 19:57
 To: support@pfsense.com
 Subject: Re: [pfSense Support] Load balancer
 
 Hiren Joshi wrote:
  Hello all,
   
  I'm using pfsense to firewall at the moment but pass all the http 
  traffic to an internal load balancer (nginx). My question 
 is, would it 
  be possible to replace nginx with pfsense and how would the two 
  compare in terms of performance?
   
  Many thanks,
  Josh.
 We use pfSense to load balance 65 million requests daily to a 
 cluster of 
 HTTP servers on fairly minimal hardware.  Performance for us has been 
 excellent.  I can't speak to nginx, never heard of it and 
 I've not had 
 reason to look past pfSense for our needs. 
 
 
 -
 To unsubscribe, e-mail: support-unsubscr...@pfsense.com
 For additional commands, e-mail: support-h...@pfsense.com
 
 Commercial support available - https://portal.pfsense.org
 
 

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] Load balancer

2009-02-07 Thread Tim Nelson
A good start is here:  
http://doc.pfsense.org/index.php?title=Category:Load_balancing

Tim Nelson
Systems/Network Support
Rockbochs Inc.
(218)727-4332 x105

- Hiren Joshi j...@moonfruit.com wrote:

 Where can I find details about the pfsense balancer? Things like how
 a
 request is handled and config options maybe even a howto?

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



RE: [pfSense Support] Load balancer

2009-02-07 Thread Hiren Joshi
Thanks for the quick reply... I just couldn't find it on the wiki!
 

 -Original Message-
 From: Tim Nelson [mailto:tnel...@rockbochs.com] 
 Sent: 07 February 2009 15:32
 To: support@pfsense.com
 Subject: Re: [pfSense Support] Load balancer
 
 A good start is here:  
 http://doc.pfsense.org/index.php?title=Category:Load_balancing
 
 Tim Nelson
 Systems/Network Support
 Rockbochs Inc.
 (218)727-4332 x105
 
 - Hiren Joshi j...@moonfruit.com wrote:
 
  Where can I find details about the pfsense balancer? Things like how
  a
  request is handled and config options maybe even a howto?
 
 -
 To unsubscribe, e-mail: support-unsubscr...@pfsense.com
 For additional commands, e-mail: support-h...@pfsense.com
 
 Commercial support available - https://portal.pfsense.org
 
 

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] Load balancer

2009-02-07 Thread Tim Nelson
I have to admit it took me a bit to find it as well. For whatever reason, when 
looking by category, it assumes you want to edit the category. I simply had to 
change the url from 
http://doc.pfsense.org/index.php?title=Category:Load_balancingaction=edit  to 
http://doc.pfsense.org/index.php?title=Category:Load_balancing . Odd. Maybe 
something could be done to make the wiki more user friendly?

Tim Nelson
Systems/Network Support
Rockbochs Inc.
(218)727-4332 x105

- Hiren Joshi j...@moonfruit.com wrote:

 Thanks for the quick reply... I just couldn't find it on the wiki!

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



[pfSense Support] captive portal without MAC filtering

2009-02-07 Thread Pete Boyd
The captive portal has the following option:
MAC filtering - Disable MAC filtering
If this option is set, no attempts will be made to ensure that the MAC
address of clients stays the same while they're logged in. This is
required when the MAC address of the client cannot be determined (usually
because there are routers between pfSense and the clients). If this is
enabled, RADIUS MAC authentication cannot be used.

This sounds useful. It could fix the difficulty we have of requiring LAN
users, who want to add wifi in their home, that they need to use wireless
access points, not wireless routers (or wireless routers configured as
purely wireless access points, for those that support this), so that they
don't ruin our charging model. People find the technical differences hard
to understand.

So, how does pfSense track people with this option enabled? How does it work?


-- 
Pete Boyd

Open Plan IT - http://openplanit.co.uk
The Golden Ear - http://thegoldenear.org



-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] captive portal without MAC filtering

2009-02-07 Thread Chris Buechler
On Sat, Feb 7, 2009 at 2:31 PM, Pete Boyd petes-li...@thegoldenear.org wrote:
 The captive portal has the following option:
 MAC filtering - Disable MAC filtering
 If this option is set, no attempts will be made to ensure that the MAC
 address of clients stays the same while they're logged in. This is
 required when the MAC address of the client cannot be determined (usually
 because there are routers between pfSense and the clients). If this is
 enabled, RADIUS MAC authentication cannot be used.

 This sounds useful. It could fix the difficulty we have of requiring LAN
 users, who want to add wifi in their home, that they need to use wireless
 access points, not wireless routers (or wireless routers configured as
 purely wireless access points, for those that support this), so that they
 don't ruin our charging model. People find the technical differences hard
 to understand.


It's simple to bridge wireless on almost every wireless router, just
plug in one of the LAN ports rather than the WAN/Internet port. Double
NAT is ugly and potentially problematic, so I would stay away from it
if at all possible. Disabling MAC filtering will work around it if you
really must do it that way.


 So, how does pfSense track people with this option enabled? How does it work?


As it says in what you quoted above, just by IP rather than by IP and MAC.

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org