Diego Rivera wrote: > Also, if you're looking for resiliency and fault tolerance, this isn't going > to > do it for you either. That you'll have no choice but to implement yourself > (i.e. dynamically swapping default routes and whatnot). Importantly, the > load > balancing function of shorewall works fine until one of the links goes down. > When it does, everyone who was using that link will be cut off. This isn't > because of Shorewall, it's because of how linux routing works.
That's a shame. I kind of guessed that it would be a non-trivial problem. My script now changes the route with "ip default route". I wonder if it will also need to rewrite some of Shorewall's configuration files, to try and steer traffic such that it avoids links that are down. > This is a not-so-trivial problem to solve regardless of how it seems. I for > one > haven't found an elegant solution (using Linux!) for circuit > load-balancing/failover problem in a dual-ISP scenario. Perhaps if someone > is > aware of one they can offer some links/insight? Have you found a solution using another product, perhaps a dedicated piece of hardware? The Peplink Balance 20L router looks intriguing. Josh ------------------------------------------------------------------------------ Come build with us! The BlackBerry® Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9-12, 2009. Register now! http://p.sf.net/sfu/devconf _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
