LARTC
[Top] [All Lists]

Re: [LARTC] Load Balance and SNAT problem.

To: Grant Taylor <gtaylor@riverviewtech.net>
Subject: Re: [LARTC] Load Balance and SNAT problem.
From: Peter Rabbitson <rabbit@rabbit.us>
Date: Wed, 27 Jun 2007 10:03:01 +0200
Cc: lartc@mailman.ds9a.nl
Delivered-to: sp-com-lists@consult.net
Delivered-to: lartc-list@securepoint.com
Delivered-to: lartc@outpost.ds9a.nl
In-reply-to: <4682118C.1090106@riverviewtech.net>
List-archive: <http://mailman.ds9a.nl/pipermail/lartc>
List-help: <mailto:lartc-request@mailman.ds9a.nl?subject=help>
List-id: "Mailinglist of the Linux Advanced Routing &amp; Traffic Control project" <lartc.mailman.ds9a.nl>
List-post: <mailto:lartc@mailman.ds9a.nl>
List-subscribe: <http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc>, <mailto:lartc-request@mailman.ds9a.nl?subject=subscribe>
List-unsubscribe: <http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc>, <mailto:lartc-request@mailman.ds9a.nl?subject=unsubscribe>
References: <000001c7b862$0f009270$b9021d0a@SalimSi> <4681FBA2.7000709@rabbit.us> <468206F4.4090900@riverviewtech.net> <46820AA8.7020305@rabbit.us> <4682118C.1090106@riverviewtech.net>
Sender: lartc-bounces@mailman.ds9a.nl
User-agent: Mozilla-Thunderbird 2.0.0.4 (X11/20070618)
Grant Taylor wrote:
Well let me take a moment to be sure we are thinking the same thing. You want the kernel to be able to realize that one route through a given default gateway is no good for a given destination and use a different default gateway even though the kernel can reach other destinations through the first default gateway? In other words, if the kernel can not reach microsoft.com through ISP1 it should use ISP2 despite the fact that it can reach google.com through ISP1?


No, nothing like this. Basically my idea is that a no-packet-seen timer is maintained for every gateway, excluding any packets with a source within the ISPs netblock. This will reliably detect that no traffic is seen beyond the ISP, and therefore pronounce the gateway dead.

The only configuration required from the administrator would be an address/netmask pair for every gateway, to use as an exclusion for the counters, and a no-packets-seen timeout, before a gateway is marked as dead. Any incoming activity on the gateway will immediately change its status back to active.

So to answer your exact question - I want the kernel to be able to realize that a gateway is no good for any destinations other than the specified netblock.

Peter
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

<Prev in Thread] Current Thread [Next in Thread>