Your dept., you're adept.

From: Andrew Kopp [mailto:[email protected]]
Sent: 14 April 2020 14:31
To: [email protected]
Subject: Re: Multiple WAN Network Interface

This is a problem at the networking level, any OS will have the same issue.

You will have a return routing problem regarding default gateway on the server 
- unless you are going todo some creative NATing with automatic return route 
scripting (which is not very good tbh many many painful issues with such an 
approach)

The example below assumes that your default gateway on the server is WAN1

- When client A uses WAN1 URL, the server will return data via default gateway 
on WAN1. No problem.

- When client B uses WAN2 URL, the server will see the initial connection 
request but any response wil still be sent back via default gateway on WAN1. 
This will break your connection and eat up bandwidth on WAN1 that you did not 
originally intend.

This issue stems from the simplicity of TCP/IP and the OSI model separating 
each layer. The application layers have very little control over networking and 
do not control routes, where as the networking layers have no idea what you are 
trying to accomplish on an application layer. NATing was born out of the need 
to be able to control the network on a session level.

If you have such an environment you should consider WAN bonding from solution 
providers such as Mushroom Networks or Peplink (no affiliation - just 
experienced with both products)

If you cannot do this, you are better off running multiple dedicated instances 
of Guacamole for each connection. You might be able to accomplish this using 
docker on the same host, but I am not familiar enough with the docker network 
stack.

If you really want to go with the NATing solution, you will need multiple 
Apache proxy listeners/ports - one for each connection. You will then need to 
separate each interface traffic via reverse NAT rules and port forwarding. Even 
when this is perfectly configured, an outage on one of the connections will put 
you back to the drawing board tearing your hair out reconfiguring the stack.

Your time is probably worth a lot more than a bonding solution.



Andrew

________________________________
From: Chris Lee 
<[email protected]<mailto:[email protected]>>
Sent: Tuesday, April 14, 2020, 05:01
To: [email protected]<mailto:[email protected]>
Subject: Multiple WAN Network Interface


HI All,

It is possible to setup multiple Network WAN interface on Fedora Linux box, so 
it can increase the total WAN bandwidth and HA?

WAN 1 \
WAN 2 --- Guacamole Server - LAN
WAN 3 /

Suppose each WAN link have 10Gb bandwidth, Then I get different URL for 
different department users:

Account: https://WAN01.example.com:8443/guacamole/
Sales:      https://WAN02.example.com:8443/guacamole/
IT:            https://WAN03.exmaple.com:8443:guacamole/
In theory , I have 30Gb WAN bandwidth?

In case one of WAN Link is dead, I just update the DNS records to redirect the 
traffic.

Any comments?

Regards,
Chris


This message and its attachment (if any) are strictly confidential and sent to 
the designated recipient(s) only. If you are not the intended recipient, please 
notify the sender by e-mail and delete this message and its attachment (if any) 
from your computer system immediately . Century City International Holdings 
Limited, Paliburg Holdings Limited, Regal Hotels International Holdings 
Limited, its respective related subsidiaries, associated companies and 
affiliates do not guarantee this message and its attachment (if any) are free 
of computer virus and would not accept any liability whatsoever arising from 
Internet transmission.


________________________________

This email and any files transmitted with it are confidential and intended 
solely for the use of the individual or entity to whom they are addressed. If 
you have received this email in error please disregard. This message may 
contain confidential information and is intended only for the individual named.

For more information about our privacy policy and how we process data, please 
visit our website and use the Privacy Notice link located on the main page.

Reply via email to