similar to: Best throughput routing or least latency routing

Does anyone know if load balancing and DNAT work well together? I know that load balancing and NAT do not, but what about a simple port forward? I can''t apply Julian Anastasov''s patches, because they don''t work with PPTP patches. :/ Anyhow, a simple: iptables -t nat -A PREROUTING -i eth0 -p tcp --dport xxx -j DNAT --to yyy:xxx iptables -I FORWARD -i eth0 -d yyy -p

lartc-request@mail man.ds9a.nl To: lartc@mailman.ds9a.nl Sent by: cc: lartc-bounces@mail Subject: LARTC Digest, Vol 20, Issue 13

The LARTC howto correctly describes load balancing and split access for traffic from a machine with multiple ISP connections (http://www.lartc.org/lartc.html#LARTC.RPDB.MULTIPLE-LINKS) -- *provided* the traffic originates from the machine itself (i.e. traffic regularly handled by the INPUT and OUTPUT chains of iptables). When forwarding traffic from an attached local network, the following

I have tried using iptraf for my NAT firewall to analyse the IP traffic. Basically I am faced with this difficulty of related the source IP to the outgoing interface to the internet, so I am wondering if anyone has a suggestion for a different ways to do it, or a suggestion for a better tool. Details :- Supposed : eth0 - LAN eth1 - WAN1 eth2 - WAN2 And then

Assuming if I have rules matching the same packet, the one chosen is the lower preference value or the high ? For example # ip rule list .... 100 from 192.168.1.0/24 lookup main 200 from all fwmark 5 lookup first ..... Packet is matching both rules, the one with priority/preference 100 or 200 is selected ? _______________________________________________ LARTC mailing list /

This problem is driving nuts, so I am seeking help here. Your help will be deeply appreciated. I have made myself a Linux bridge with eth1 and eth0 to form br0. Then I run a script to configure tc with htb on it. But I can never match non-icmp traffic ( such as tcp and udp ) with TOS or DSCP values such as 0x68. The full story as follows :- 1. On the source testing machine, I do this to set

As you are probably aware, this is a ever green topic. I have personally tried doing it, testing it and verifying it and I am myself finding this problem challenging and frustrating. Most of the scripts will recommend some form of rate limiting ( or policing ) on the download. But the challenge is how to determine the correct value for the policing ? Lot of the recommendation says use x %

Hello everybody, I am using fairly standard setup with tinc version 1.0.31 on Debian 9.1 and Windows Pro 7 clients, however the users complain that tinc is very slow. (they connect to smb shares and transfer files). This is my configuration the client host files only have the keys. http://paste.debian.net/plainh/7a904554 Any advice and options to speed the connections up. What Cypher will

Subject almost says it all, I wonder if there is a way for me to use iptables matches like l7 and/or ipp2p match in a bridge ( one ethernet in and one ethernet out ) ? Regards.

Normally when we talk about traffic control, we are talking about doing traffic control (tc) using a router, ie packets into an interface and based on routing, they goes out to somewhere else. However I have a box with two interfaces, eth0 and eth1 added to a bridge br0 and I would like to perform traffic control via the two interfaces. Is that supposed to work the same as the router

I have a requirement which I guess it is not too unusually, however I haven''t quite figured out how to do it and couldn''t find any examples which handle that. I have made myself a Linux-based bridge, eth0 bridged with eth1 to form br0. In this bridge, I run ''tc'' script to handle QoS. So far nothing unusual. However, what''s different is that this

hi there, I just wanted to share a recent discovery I did on how to setup a secure VPN implementation for linux 2.4.x (I''m using 2.4.20 but it should be working, as far as documentation states, for > 2.4.18) without using FreeS/WAN. The tool (ipsec_tunnel: http://ringstrom.mine.nu/ipsec_tunnel/, by Tobias Ringström) is a kernel module based on ipip and ip_gre. It uses CyptoAPI to

Hi Everyone, Could someone tell me whether Tinc builds its own routing table to 'hop' between LANs? e.g. LAN A <--> LAN B <--> LAN C Would Tinc resolve a path between LAN A and LAN C automatically (i.e. to hop over LAN B)? Or would I need to setup routing tables for this myself? Thanks very much for any help :-) John _______________________________________________ Join

Hi all, I am using a redhat 8.x linux box configured with zebra routing software which is also configured with ospfd I have 2 backbone routers running ospf connected to different isp''s I have 3 local routers also running ospf within themselfs and also with the 2 backbone routers (all are linux boxes) router A - backbone router 1 router B - backbone router 2 router C - local router 1

Hi all, I used netperf to measure throughput between dom0 & domU. The throughput between dom0 -> domU was 256.00 Mb/sec domU -> dom0 was 401.15 Mb/sec. 1) Dom0 -> DomU: Recv Socket Size bytes Send Socket Size bytes Send Message Size bytes Elapsed Time Secs. Throughput Mbs/sec 87380 16384 16384 10.01 231.61

Hi all, I used netperf to measure throughput between dom0 & domU. The throughput between dom0 -> domU was 256.00 Mb/sec domU -> dom0 was 401.15 Mb/sec. 1) Dom0 -> DomU: Recv Socket Size bytes Send Socket Size bytes Send Message Size bytes Elapsed Time Secs. Throughput Mbs/sec 87380 16384 16384 10.01 231.61

I hope I'm in the right place for this question. I am in the process of creating a large scale production fileserver architecture for the purpose of serving very large files (~4.5GB) to a small number of clients (~200). My assumptions to this point have been that my throughput would be constrained by hardware and not software, but I would like some validation of this thinking. I am hoping

Hi all, I used netperf to measure throughput between dom0 & domU. The throughput between dom0 -> domU was 256.00 Mb/sec domU -> dom0 was 401.15 Mb/sec. There is a huge variation in the throughput between dom0 & domU. To my surprise the throughput between domU -> dom0 is more. The value which I specified are consistent values.

Dear I am very new to tinc and would like to ask any advice regarding tinc's throughput. I have been using OpenVPN for several years and found tinc as a simpler/scaler VPN using TUN/TAP device. I have tried to use tinc on WindowsXP and measured throughput in contrast to OpenVPN. My test revealed that tinc is faster in PING response (almost half of OpenVPN). However, when I tested with

Hi everybody I have a some question about throughput for glusterfs volume. I have 3 server for glusterfs, each have one brick and 1GbE for their network, I have made distributed replica 3 volume with these 3 bricks. the network between the clients and the servers are 1GbE. refer to this link: https://s3.amazonaws.com/aws001/guided_trek/Perform ance_in_a_Gluster_Systemv6F.pdf I have setup