[Rack] WAN loadbalancing rule updates

Ben Kochie ben at nerp.net
Mon Sep 3 01:04:21 UTC 2012


So I figured out some stuff with the vyatta config to help with WAN load 
balancing.

So here are how the interfaces are configured:

  interface-health eth0 {
      failure-count 5
      nexthop 199.188.193.1
      success-count 1
      test 10 {
          resp-time 5
          target 208.90.215.1
          ttl-limit 1
          type ping
      }
  }
  interface-health eth2 {
      failure-count 4
      nexthop 75.101.62.1
      success-count 1
      test 10 {
          resp-time 5
          target 70.36.228.61
          ttl-limit 1
          type ping
      }

They have a 5 second ICMP ping test to their local gateways.

I updated the rules a bit.

  rule 10 {
      destination {
          port 22
      }
      inbound-interface eth1
      interface eth2 {
      }
      protocol tcp
  }
  rule 11 {
      destination {
          port 22
      }
      inbound-interface eth1
      interface eth0 {
      }
      protocol tcp
  }

These two rules mean that SSH is configured to stick to eth2 (sonic) 
unless it's down.

  rule 20 {
      failover
      inbound-interface eth1
      interface eth0 {
          weight 100
      }
      interface eth2 {
          weight 1
      }
      protocol all
  }

This sets the rest of the traffic to failover with a weight of 100 eth0 
(monkeybrains)

-ben


More information about the Rack mailing list