Ok, Thanks Holger -----Original Message----- From: Holger Bauer [mailto:[EMAIL PROTECTED] Sent: Friday, March 09, 2007 10:44 PM To: support@pfsense.com Subject: AW: [pfSense Support] Load Balancer
For sure. I remember that there has been a rule issue with pings that also resulted in wan quality rrd graph showing constant packetloss which was fixed and your problem seems to be similiar. Holger -----Ursprüngliche Nachricht----- Von: Kelvin Chiang [mailto:[EMAIL PROTECTED] Gesendet: Freitag, 9. März 2007 15:19 An: support@pfsense.com Betreff: RE: [pfSense Support] Load Balancer Hi Holger, we built it on 31st Jan 2007. Has there been significant change since then? -----Original Message----- From: Holger Bauer [mailto:[EMAIL PROTECTED] Sent: Friday, March 09, 2007 7:42 PM To: support@pfsense.com Subject: AW: [pfSense Support] Load Balancer 1. What Version of pfSense are you running? If it's not a recent snapshot please upgrade. 2. Yes, that is correct. Holger -----Ursprüngliche Nachricht----- Von: Kelvin Chiang [mailto:[EMAIL PROTECTED] Gesendet: Freitag, 9. März 2007 12:36 An: support@pfsense.com Betreff: RE: [pfSense Support] Load Balancer Hi Holger, 1. I take back my words. WAN interface fires icmp poll too, but strange that the icmp poll fired by OPT1 is found in the states table but not for the one fired by the WAN interface. I found this on a "reject" log in firewall log. I configured the firewall rule for WAN interface to accept "echo reply" and it functions now. It is strange that the OPT1 interface did not reject the "echo reply" though. 2. To make sure again, as long as the firewall rules make use of one of the 3 pools (instead of all 3 pools), everything will be ok? Regards, Kelvin -----Original Message----- From: Holger Bauer [mailto:[EMAIL PROTECTED] Sent: Friday, March 09, 2007 7:25 PM To: support@pfsense.com Subject: AW: [pfSense Support] Load Balancer Regarding 1: we'll check this Regarding 2: Yes, you are right. You typicall want to even create 3 pools for this: one loadbalanced (WAN+OPT1), one failover WAN to OPT1 and one failover OPT1 to WAN. Then just create firewallrules to make use of either of the pools. This way you can have services that run on both or prefer the one or other connection. Holger ________________________________ Von: Kelvin Chiang [mailto:[EMAIL PROTECTED] Gesendet: Freitag, 9. März 2007 11:36 An: support@pfsense.com Betreff: [pfSense Support] Load Balancer Hi, I have some questions concerning Load Balancer and Failover, hope that someone can help. 1. I have configured the load balancer for 2 physical interfaces (WAN & OPT1). I monitor the states table and realized that the icmp packets for monitoring purpose were fired only from the OPT1 interface, none from the WAN interface. Is this what it is supposed to do? Logically, to monitor whether each interface is online or offline, the icmp should be fired from each interface respectively. 2. If I want the WAN and OPT1 interface to function both for load balancing as well as failover, do I create 2 gateway pool, one with "Load Balancing" behaviour and other with "Fail Over" behaviour? Regards, Kelvin --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
