Re: Round-robin + Squid + 3 ISP

ok,

What its the nice solution :

1=BA. Using tcp_outgoning_address with Aclrandom or similar
2=BA. Not using Two wans,(If I can route WWW, HTTPS, Trought wan2 its
fine for me). I want to route then FTP trought wan3, and Jabber/MSN..
trought WAN1 =BFAny example code with my config?
3=BA. Not using Squid

Please if someone can write a example with my config I thank very
much.. I search and MANY PEOPLE want to do similar env.

Thanks to all!

On Jan 18, 8:42=A0am, [email protected] (Stuart Henderson) wrote:
> On 2010/01/17 12:08, Steven Surdock wrote:
>
>
>
>
>
> > > -----Original Message-----
> > > From: [email protected] [mailto:[email protected]] On Behal=
f
> > Of
> > > Stuart Henderson
> > > Sent: Sunday, January 17, 2010 6:20 AM
> > > To: mashenko shenua
> > > Cc: [email protected]
> > > Subject: Re: Round-robin + Squid + 3 ISP
>
> > > On 2010/01/16 22:00, mashenko shenua wrote:
> > > > Can you try it??. Some people tell me I can't use Squid with
> > > > round-robin.. I see this for pfsense :
>
> > > >http://forum.pfsense.org/index.php?topic=3D7591.msg42943
>
> > ..
>
> > > Thinking about it some more, perhaps this isn't possible with old
> > > PF where nat was handled separately from filter rules; you might need
> > > -current to do this...
>
> > I think I have seen references to using,
> > =A0 =A0nat on $ext1 from "self" to any -> ($ext1)
> > =A0 =A0nat on $ext1 from $internal_net to any -> ($ext1)
> > =A0 =A0nat on $ext2 from "self" to any -> ($ext2)
> > =A0 =A0nat on $ext2 from $internal_net to any -> ($ext2)
>
> Ah, that happens before route-to, so you could probably do round-robin
> nat to a couple of addresses, and then have route-to punt them to the
> correct interface. But I can't test it, any systems that I can
> experiment on have been running PF with the new NAT code for
> several months..
>
> > To guarantee correct outbound addressing. =A0IMHO, this is something th=
at
> > Squid should handle...
>
> Well, it's also something PF should handle, there are any number of
> reasons you might want to load-balance and you can't expect every app
> that makes an outgoing network connection to have a way to set the
> source address.
>
> Looks like you can do it with squid 3 using a random ACL.