Linux ICS with 2 ADSL connections

[rtyree76]

Hello!

I need some help. I am currently fixing my home network to get it working the way I want. Here is what I (will) have:


Redhat 7.3 Server with 3 NIC's:

eth0 - adsl connection #1 63.230.x.x

eth1 - adsl connection #2 65.224.x.x

eth2 - internal private network 192.168.0.1

Server does DHCP to the private network clients (7 workstations), acts as a SMB server, and also does web/email on the eth0 connection for me on the internet. I also have an NT web/file server on the 63.230.x.x network that all machines in the internal network need access to, if it is possible. If not, I guess I kiss off NT alltogether. haha.


I would like to get this working so that the internal network will utilize both ADSL connections for traffic. I understand that they can't be "bonded" so to speak, but there is enough traffic and users that it would be worth my time to make sure both connections are being utilized for incoming and outgoing traffic. I have looked into doing this a couple of ways, and am looking for input:

First, I could try and figure out how to make this work with iptables. Not exactly sure how to do this though. Would need a good NHF-type walk thru to get this up and running.

Second, I could try iproute2. This is what I am leaning toward, as it seems a better fit for what I am trying to do. Again, I would need a good walk thru to get this going.

I have a good understanding of routing/switching and a beginning understanding of firewalls, but I am a linux newb. I guess what I am trying to say is that I understand most of the big words, I just need someone to tell me how to apply them to linux.

Any help would be appreciated, feel free to PM me with ideas also.

Thanks,

Rob

[jumpedintothefire]

http://www.samag.com/documents/s=1824/sam0201h/0201h.htm

Has some pointers, post back with how it goes...
might need to try it too....

[rtyree76]

Yeah, this looks like what I need - One question - I can do a regular install of redhat 7.3 or 8.0, but how do I make sure that the kernel is compiled with

CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_IP_MULTIPLE_TABLES=y
CONFIG_IP_ROUTE_MULTIPATH=y

Would it be this way by default if i chose to install routing tools etc during the install? Or do i need to recompile? (gulp) . Is there a command I can run to see if my current install has these options correct? Thanks in advance for the help, and i'll keep up this post as soon as i figure out answers to this question. Who knows, maybe I could even write up a "how I did it" type thing to save future newbies from my agony here.

Rob

[jumpedintothefire]

In the /boot directory, there is a file called config-2.4.X that is the "stock" .config file that would be in /usr/src/linux-2.4, if you recompiled.... open it with a text editor. Good news, for me anyway, mine has the above set to yes. Yours "should" also, but you never know.....

[rtyree76]

Ok, looks like my current install of RH 8.0 has those options marked yes also - I will try and get this set up, and write up a how-to or something to that effect when I am done. Does anyone know what option during the RH setup tells the Kernel to compile that way or not? not essential info, but i think it would be helpful to know if I am going to write something up.

Rob

[rtyree76]

Ok, i went thru the setup exactly as in the SysAdmin Magazine article. everything seemed to work up until I tried to get the load balancing portion working. I would run "ip route list" and rather than showing both routes equalized, It would tell me that one connection was dead and had a weight of 255. I checked the card, other configuration files, everything is exactly as it was supposed to be. Any ideas?

[jumpedintothefire]

Did you remove the default gateway in /etc/sysconfig/network file??

You removed the default gateway with route before you tried the "ip route add default equalize" ??

That's all I can think of at the moment.....

[rtyree76]

Gateway was removed when i ran the multipath command - the weird thing, is it usually drops the connection that wsa the old default gateway and keeps the new connection. I am not sure how it is making that determination. I am thinking pretty hard about looking for a hardware solution to this - I have been beating my head against the wall for too long. Does anyone have any experiences positive or negative with the NexLand Pro800 Turbo? This box looks like it would do what i want, but I would like to hear if anyone has experience with it yet. Thanks again

[Cadillac84]

Have you considered a vasectomy?

If your private network at home has SEVEN workstations, you have too many children already!!!

With the money you save by not having any more children, you can buy the hardware you need to optimize your load balancing!!

-----------

Sorry -- couldn't resist.

C

[rtyree76]

I run a business from my home that requires that 3-5 people have internet access at the same time, plus there is a few personal machines, email+web server, plus some other goodies that I am playing with in my spare time (ie the linux router). Don't hate me because I have 2 DSL lines and you don't.

hehe.

Anyone out there have any ideas that could help me out here? I'm about a day or two away from picking up a Nexland Pro800Turbo to do the job for me, unless I can get the linux box up pretty quick.

Rob