Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #4054 > unrolled thread

4 WAN, load balancing and port forwarding.

Back to article view | Back to comp.os.linux.networking

Contents

  4 WAN, load balancing and port forwarding. Mariusz Koniarz <mkoniarz@gmail.com> - 2017-05-17 10:30 -0700
    Re: 4 WAN, load balancing and port forwarding. Pascal Hambourg <pascal@plouf.fr.eu.org> - 2017-05-17 20:12 +0200

#4054 — 4 WAN, load balancing and port forwarding.

Hello.

I have 4 ISP with 4 public static IP -> 4 modem/routers.
(2x LTE, 2x DSL)

Can't setup bridge mode, so on all 4 routers there is DMZ.

For test, I had setup LAN like in this picture:

http://obrazki.elektroda.pl/1408751200_1495012294.png

I Installed pfSense for load balancing&failover - works great.
but...
I can't configure port forwarding in a way, that my servers can be accessible from internet.

What I need:
#1 working loadbalancing.
#2 my servers accessible from all 4 external IP.

Maybe I should put serwers before pfSense, but dont know howto configure both loadbalancing for LAN computers and port forwarding& multi WAN route on servers.

Is this possible?
I can reconfigure all LAN computers, LAN address&DMZ on routers, and change pfSense to something else.
Currently computer running pfSense has 5 ethernet cards, so there are many possibilities.

Sorry for poor english. 

Any advice?

[toc] | [next] | [standalone]

#4055

Le 17/05/2017 à 19:30, Mariusz Koniarz a écrit :
>
> I have 4 ISP with 4 public static IP -> 4 modem/routers.
> (2x LTE, 2x DSL)
>
> Can't setup bridge mode, so on all 4 routers there is DMZ.
> For test, I had setup LAN like in this picture:
> http://obrazki.elektroda.pl/1408751200_1495012294.png
>
> I Installed pfSense for load balancing&failover - works great.
> but...
> I can't configure port forwarding in a way, that my servers can be accessible from internet.

This is a Linux group, but pfSense is based on *BSD.

> What I need:
> #1 working loadbalancing.
> #2 my servers accessible from all 4 external IP.

I cannot help you on pfSense, but you could do the port forwarding with 
a Linux box using iptables and advanced routing (and leave pfSense for 
load balancing and failover).

Basically, you need to send a reply packet via the same router which 
forwarded the original packet. So the box must be able to identify which 
router sent a packet. You can use the source MAC address, or have each 
router forwarding packets to a different destination IP address (all 
owned by the box).

[toc] | [prev] | [standalone]

Back to top | Article view | comp.os.linux.networking

csiph-web