Failover and load balancing using advanced NAT daemon

Jon Simola jon at
Wed Jan 25 13:05:09 PST 2006

On 1/25/06, Oleg Tarasov <subscriber at> wrote:

> First three functions would be great to be implemented inside one
> daemon like standart natd. Packets should be diverted into it. This
> daemon can easily perform all of the tasks listed above as all of the
> packets are passed through it.
> Using it in a combination with policy-routing would be a powerful
> mechanism!

You may want to check out PF, the packet filter imported from OpenBSD.
I have it running on some large routers doing NAT out multiple
interfaces, load balancing and policy routing. Careful use of anchors
and some scripting (or ifstated which might be in ports) can move
traffic off failed links or respond to changing loads.

I've done a lot with both ipfw and PF now, and I'm finding PF to be
more flexible for my uses.

Jon Simola
Systems Administrator
ABC Communications

More information about the freebsd-net mailing list