[es] - Load Balancing i failover

tandrkalo1
Milan Ergelasev
Novi Sad

Član broj: 269296
Poruke: 268
*.dynamic.isp.telekom.rs.

+21 Profil

^{30.12.2011. u 19:21 - pre 150 meseci}

Imam jedan adsl i jedan kablovski net nakacen na MikroTik, a iza je lokalna mreza od desetak racunara...
Failover je bitan jer redovno rikne jedan od linkova pa ne dodje po pola sata...
Onda svi idu preko jednog linka, takodje kada rikne prvi onda idu preko drugog, a Mikrotik u isto vreme radi i loadbalancing.
E sada sve je to ok, pukne jedan link idu preko drugog i obratno, to mi radi, a radi i load balancing ali ne bas kako bih ja hteo. Naime hteo bih da Mikrotik opterecuje linkove koliko toliko ravnomerno, a ne ovako kako on to radi, recimo nkeada koristi samo jedan link, nikako da makne ovaj drugi, stalno saobracaj na nuli, a nekada koristi nesto malo...
Na ovaj nacin sam podesio loadbalancing:

Code:

/ ip address
add address=192.168.100.1/24 network=192.168.100.0 broadcast=192.168.100.255 interface=lokal
add address=192.168.10.10/24 network=192.168.10.0 broadcast=192.168.10.255 interface=link2
add address=192.168.20.10/24 network=192.168.20.0 broadcast=192.168.20.255 interface=link1

/ ip route
add dst-address=0.0.0.0/0 gateway=192.168.10.1,192.168.20.1 check-gateway=ping

/ ip firewall nat
add chain=srcnat out-interface=link1 action=masquerade
add chain=srcnat out-interface=link2 action=masquerade

/ ip firewall mangle
add chain=input in-interface=link1 action=mark-connection new-connection-mark=link1_conn
add chain=input in-interface=link2 action=mark-connection new-connection-mark=link2_conn
add chain=output connection-mark=link1_conn action=mark-routing new-routing-mark=to_wla1
add chain=output connection-mark=link1_conn action=mark-routing new-routing-mark=to_wla2

/ ip route
add dst-address=0.0.0.0/0 gateway=192.168.10.1 routing-mark=to_wla1
add dst-address=0.0.0.0/0 gateway=192.168.20.1 routing-mark=to_wla2

E sada me zanima gde gresim?
Verovatno nisam podesio jos nesto sto fali ali ne mogu da skontam sta...
Hvala unapred svima na pomoci...

Odgovor na temu

mckrsta
Nenad Krstic
System Engineer
AT&T Slovakia
Bratislava

Član broj: 44532
Poruke: 219
*.static.sbb.rs.

Sajt: www.bor030.net

+6 Profil

Re: Load Balancing i failover

^{30.12.2011. u 20:48 - pre 150 meseci}

ovako je podeseno kod mene, i radi koliko toliko ravnomerno, mada nikad neces videti i na jednom i na drugom po dva mega npr, jer mozda kroz jedan link ide download od nekog korisnika koji konstantno vuce, a na drugom ide neki http od nekog drugog korisnika...

Code:

MANGLE
;;; isp1
     chain=prerouting action=mark-connection new-connection-mark=ISP1_Conn
     passthrough=yes in-interface=INTERFEJS KA JEDNOM PROVAJDERU

1   chain=prerouting action=mark-connection new-connection-mark=ISP1_Conn
     passthrough=yes dst-address-type=!local in-interface=Veza SW 1
     per-connection-classifier=both-addresses-and-ports:2/0

2   chain=prerouting action=mark-routing new-routing-mark=to_ISP1
     passthrough=yes in-interface=Veza SW 1 connection-mark=ISP1_Conn

3   chain=output action=mark-routing new-routing-mark=to_ISP1 passthrough=yes
     connection-mark=ISP1_Conn

4   ;;; isp2
     chain=prerouting action=mark-connection new-connection-mark=ISP2_Conn
     passthrough=yes in-interface=INTERFEJS KA DRUGOM PROVAJDERU

5   chain=prerouting action=mark-connection new-connection-mark=ISP2_Conn
     passthrough=yes dst-address-type=!local in-interface=Veza SW 1
     per-connection-classifier=both-addresses-and-ports:2/1

6   chain=prerouting action=mark-routing new-routing-mark=to_ISP2
     passthrough=yes in-interface=Veza SW 1 connection-mark=ISP2_Conn

7   chain=output action=mark-routing new-routing-mark=to_ISP2 passthrough=yes
     connection-mark=ISP2_Conn

ROUTE
0 A S  dst-address=0.0.0.0/0 pref-src=X.X.X.X gateway=X.X.X.X
        gateway-status=X.X.X.X reachable XXX check-gateway=ping
        distance=1 scope=30 target-scope=10 routing-mark=to_ISP1

1 A S  dst-address=0.0.0.0/0 pref-src=X.X.X.X gateway=X.X.X.X
        gateway-status=X.X.X.X reachable XXX check-gateway=ping
        distance=1 scope=30 target-scope=10 routing-mark=to_ISP2

2 ADS  dst-address=0.0.0.0/0 gateway=X.X.X.X
        gateway-status=X.X.X.X reachable XXX distance=0 scope=30
        target-scope=10 vrf-interface=XXX

3   S  dst-address=0.0.0.0/0 gateway=X.X.X.X
        gateway-status=X.X.X.X reachable XXX check-gateway=ping
        distance=5 scope=30 target-scope=10

Ovde se koristi PCC load balancing... dobar je, probao sam vise njih ovaj mi je i stabilan i lepo radi, generalno sa ovim load balancingom sto vise korisnika on radi bolje...

ako te nesto buni pitaj... mislim da je ovo Pedjin tutorial... potrazi malo...

pozdrav

Odgovor na temu