similar to: Solved: dgd/iproute/iptables multihoming problem

I am running 2.4.20 with Julian Anastasov''s patches (routes-2.4.20-9.diff), iptables v1.2.6a, iproute2-ss010824 on Debian. I have set up our internal gateway to multihome 2 T1''s as described in http://www.linuxvirtualserver.org/~julian/nano.txt . The only difference is that I use multiple IP''s on the external interfaces. EXA A.B.C.225 --------------------

I have a doubt. If you use such a script monitoring the link status with ping and then reconfiguring, why do you need the DGD patch? You need to do some reconfiguration (change multipath to a single default route) anyway if you use the script, right? Also, the DGD patch uses src to lookup the routing table entry, but if you have a dynamic IP for the WAN interface (PPPoE, DHCP etc), this approach

Hi All, I have one query which may be quite silly. My Linux internet gateway has Dead Gateway Detetction patches applied to it''s kernel. If I am right, the DGD patches allow us to add static routes which are not destroyed even if the interface or the link goes down. I want to know whether, with the DGD patches applied, the traffic shaping rules defined using tc, added to an interface

Hi I have read various info, and mailing list archives, but have not found an answer to the following. I have a few servers with configurations similar to the following: They each have multiple uplinks to the Internet, and a sample config is as follows: eth1 is 192.168.0.1, connected to 192.168.0.2 eth2 is 192.168.1.1, connected to 192.168.1.2 My default route looks like: ip route add scope

Hi, I try to shape my incoming traffic. I have 2MBit/s DSL bandwith and the following ruleset (on the internal interface): $INT="eth1"; $INT_NET=192.168.1.0; $MAX_IN=2Mbps; dev $INT { egress { class (<$int>) if ip_src:24 == $INT_NET; class (<$ssh>) if tcp_sport == PORT_SSH; class (<$smtp>) if tcp_sport == PORT_SMTP; class (<$http>) if

Hello all! I applied http://www.ssi.bg/~ja/routes-2.6.8-10.diff patch to kernel 2.6.8.1 and it works fine, or almost fine. It does the load balancing well, but when one link is dropped it continues to try it. At the end of http://www.ssi.bg/~ja/nano.txt it is said to ping gateway 1 and gateway 2, for the kernel to know if that route is working, but since my linux is connected to the links

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 All, are there any plans to allow FreeBSD jails to bind to more than one IP address? My scenario (virtual hosting) : 3 front-end hosts with 2 interfaces each, one on the public network, the other on a private subnet. 1 back-end host, providing NFS mounts for the front-ends. This scenarion is not uncommon in ISP environments, usually with a big

As suggested on the netfilter list, I''m posting here too: Current network layout: Internet | ----100.100.251.217---- / (router) \ Internet | | | 100.100.251.220 100.100.251.218

Hello all, I have a linux router with 2 interfaces(eth0 - ISP and eth1 - LAN). I''ve established a VPN connection(openvpn) over eth0 with a friend of mine => tun0 interface. I want half of my LAN to have Internet access through the eth0 interface and the other half through the tun0 interface. I''ve set up a script like the "load balancing split access" instructions

Hello all, I need a very simple routing protocol for VPN redundancy. We have several sites and each site has a Linux router and two IPCops each with an ADSL connection to the internet using different ISP''s. I have configured VPN''s between all of the sites for each IPcop on ispA and the same for the IPCops on ispB. This way, if one of the ISP fails, I change the route on the

Hi all iam trying to setup Dual gate using Julian patch DGD, but when i try tp patch to my kernel with fedora iam getting the following eroor can some one suggest me what is wrong or i need a latest patch for fedora [root@linux-2.4.22-1.2115.nptl]# patch -p1 < /root/update/update/routes-2.4.20-9.diff patching file include/linux/netfilter_ipv4/ip_nat.h patching file

Hi all! After that good thread "DGD patch not detecting dead gateway" I was able to set up a Load Balancing with ping based DGD (without Julian Anastasov patch). But now I''m facing a new problem and tried some options, with only partial solutions. I made a script based on http://www.mail-archive.com/lartc@mailman.ds9a.nl/msg16257.html (Thank you Manish Kathuria),

Hi all I would like to know what happens with a dead router in a multipath configuration like the one presented http://lartc.org/howto/lartc.rpdb.multiple-links.html Do i need to monitor dead routers and reconfigure ? Guillermo

Hi all How to add a static route to a hostname with iproute2? I tried: ip route add linux.com via 192.168.1.1 I got the following reply: Error: an inet prefix is expected rather than "linux.com". With "route command" I do not have problems route add -host linux.com gw 200.214.148.140 As the iproute2 is the standard in the current linus distros, I would like to know if is

I am using policy based routing and I have 3 route tables setup, ADSLLink1, ADSLLink2, and ADSLLoadBalanced, "ip route show <table>" will show me the routes that I have added to the first two, but not from ADSLLoadBalanced, it will show the last route that was added to the table but no others. There are approx 16 routes added to the table, I know they are there because they work,

-- Can someone please give an example or two how one might accomplish DNAT''ing and ip routes? It appears that the de''DNAT''ing takes place after the routing decisions so when I use something like ip rule from incoming-address table out-route it just doesn''t seem to ever route anything out. DNAT doesn''t seem to keep track of the incoming

Hi, i need to setup a equalized route like this: # ip route add default scope global equalize nexthop via xx.xx.5.254 dev eth1 nexthop via xx.xx.5.254 dev eth2 The problem i''m having is that i need to use virtual interfaces too. Example (something like that): ip route add default scope global equalize nexthop via xx.xx.5.254 dev eth1 nexthop via xx.xx.5.254 dev eth2 \ nexthop

i forget i''m using kernel 2.4.20 i''ve just compiled the new kernel 2.6.13 but i didn''t use it yet.- but it was compiled (the new kernel) with a lots of new support options to do lots of things with QoS and iptables upport etcetcetc regards again.- Guillermo from Argentina __________________________________________________ Correo Yahoo! Espacio para todos tus

Anybody knows allready programmed libraries either java or C to create/destroy queues?

Hi, when iproute is installed then the default queue that it is giving to an interface is pfifo_fast. I would like to ask whether it is possible to disable this feature and rather have the kernel give by default to an interface the queue that it would give if iproute hadn''t been installed. I want to be able to customize the queue with tc only when it is necessary. Is this