Failover and load balancing using advanced NAT daemon
jon at abccomm.com
Wed Jan 25 13:05:09 PST 2006
On 1/25/06, Oleg Tarasov <subscriber at osk.com.ua> wrote:
> First three functions would be great to be implemented inside one
> daemon like standart natd. Packets should be diverted into it. This
> daemon can easily perform all of the tasks listed above as all of the
> packets are passed through it.
> Using it in a combination with policy-routing would be a powerful
You may want to check out PF, the packet filter imported from OpenBSD.
I have it running on some large routers doing NAT out multiple
interfaces, load balancing and policy routing. Careful use of anchors
and some scripting (or ifstated which might be in ports) can move
traffic off failed links or respond to changing loads.
I've done a lot with both ipfw and PF now, and I'm finding PF to be
more flexible for my uses.
More information about the freebsd-net