Dvije internet konekcije ...
Postano: 29 ožu 2011, 11:04
Ovako imam dvije defaulne route tj dvije pppoe konekcije adsl0 i adsl1 i pokušavam složiti podjelu prometa po svakom interfejsu posebno.
echo 0 > /proc/sys/net/ipv4/conf/adsl0/rp_filter
echo 0 > /proc/sys/net/ipv4/conf/adsl1/rp_filter
echo 1 > /proc/sys/net/ipv4/conf/eth0/proxy_arp
#postavke routi
ip route add to default nexthop dev adsl0 nexthop dev adsl1
ip route add default dev adsl0
ip route add default dev adsl1
#fwmark za adsl0 promet
ip rule del fwmark 30 table squidbox
ip rule add fwmark 30 table squidbox
#fwmark za adsl1 promet
ip rule del fwmark 40 table p2pbox
ip rule add fwmark 40 table p2pbox
dakle interfejs:
adsl0 - ulaz sa neta voip, ssh, irc, mysql i game server
- izlaz na net http preko proxy servera (squid), game-out i manji paketi
adsl1 - ostali promet ulaz i izlaz
Trenutni system je Debian lenny (asterisk, CS game server, web server, itd. Kernel(2.6.31) i iptabels(1.4.3.2) sam pečiral sa imq-dev, layer7, ipp2p, tarpit i xtables.
Daklem ima ko da je uspio složiti fw routing na dvije defaulne route za slični promet.
Pozz!
echo 0 > /proc/sys/net/ipv4/conf/adsl0/rp_filter
echo 0 > /proc/sys/net/ipv4/conf/adsl1/rp_filter
echo 1 > /proc/sys/net/ipv4/conf/eth0/proxy_arp
#postavke routi
ip route add to default nexthop dev adsl0 nexthop dev adsl1
ip route add default dev adsl0
ip route add default dev adsl1
#fwmark za adsl0 promet
ip rule del fwmark 30 table squidbox
ip rule add fwmark 30 table squidbox
#fwmark za adsl1 promet
ip rule del fwmark 40 table p2pbox
ip rule add fwmark 40 table p2pbox
dakle interfejs:
adsl0 - ulaz sa neta voip, ssh, irc, mysql i game server
- izlaz na net http preko proxy servera (squid), game-out i manji paketi
adsl1 - ostali promet ulaz i izlaz
Trenutni system je Debian lenny (asterisk, CS game server, web server, itd. Kernel(2.6.31) i iptabels(1.4.3.2) sam pečiral sa imq-dev, layer7, ipp2p, tarpit i xtables.
Daklem ima ko da je uspio složiti fw routing na dvije defaulne route za slični promet.
Pozz!