On 20/09/2009 23:39, Diego Rivera wrote: > Also, if you're looking for resiliency and fault tolerance, this isn't > going to do it for you either. That you'll have no choice but to > implement yourself (i.e. dynamically swapping default routes and > whatnot). Importantly, the load balancing function of shorewall works > fine until one of the links goes down. When it does, everyone who was > using that link will be cut off. This isn't because of Shorewall, it's > because of how linux routing works. > > This is a not-so-trivial problem to solve regardless of how it seems. I > for one haven't found an elegant solution (using Linux!) for circuit > load-balancing/failover problem in a dual-ISP scenario. Perhaps if > someone is aware of one they can offer some links/insight?
Since you're using two (or more) different ISPs with IP pools coming from those ISPs, the failover will never be really clean. Having a /24 attributed to your company with redundant routers and redundant ISPs will allow you to announce this /24 on both ISPs network (providing they do support BGP) and will be clean. ------------------------------------------------------------------------------ Come build with us! The BlackBerry® Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9-12, 2009. Register now! http://p.sf.net/sfu/devconf _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
