Matt
Take me down to the paradise city
Premium
join:2003-07-20
Jamestown, NC | Dual-WAN Router - Traffic Control? For those of you with Dual-WAN routers, what sort of control do you have over your traffic? For example, can you send HTTP across one link but FTP across another without resorting to manual firewall rule creation? | |
|
 
dualwan
| Re: Dual-WAN Router - Traffic Control? Most of the dual wan port routers i have used (linksys and Netgear) have a protocol binding feature that lets you force certains protocols or ports over specific wan links. Works quite well from what i can remember. This was all done through the GUI interface, and was pretty simple to do. | |
|
|
 | |
| |
Matt
Take me down to the paradise city
Premium
join:2003-07-20
Jamestown, NC
 ·North State Commun..
| Re: Dual-WAN Router - Traffic Control? said by drew  :Interestingly enough, I think he might be purchasing a RV042 here soon  hax0r! r u in mi internets? | |
|
keeska
Premium
join:2007-04-06
Sedona, AZ
| quote:
For those of you with Dual-WAN routers, what sort of control do you have over your traffic?
Limit specific IP address and/or ports and/or types of traffic (deep packet inspection) to a single link.
Specify what percentage of traffic is sent over each outgoing link based on src and/or destination ip address and/or port
Load balance each link based on static bandwidth.
Load balance each link based on actually measured bandwidth.
Detect upstream blackhole and reroute all traffic to the remaining link.
Use QoS to route traffic to the least used link or to separate traffic keeping high priority traffic in the front of the queue on a given link.
There are a few more features but I have not really used them. | |
|
|
| 
Leathal
Premium
join:2002-02-09
Toronto, ON | Re: Dual-WAN Router - Traffic Control? that's why Matt needs to find a router that does IP binding on the load balancing if he want's to still be able to use NLB. Something which the linksys doesn't support...
Leathal | |
|
| | 
Nightfall
My Goal Is To Deny Yours
Premium,MVM
join:2001-08-03
Grand Rapids, MI
 ·Comcast
·AT&T Midwest
 ·Site5.com
| Re: Dual-WAN Router - Traffic Control? said by Leathal :that's why Matt needs to find a router that does IP binding on the load balancing if he want's to still be able to use NLB. Something which the linksys doesn't support... Leathal Actually, the Linksys RV082 does support that. I have set that up before and its not hard to setup.
--
My domain - Nightfall.net | |
|
| | |
Leathal
Premium
join:2002-02-09
Toronto, ON
| Re: Dual-WAN Router - Traffic Control? said by Nightfall :said by Leathal :that's why Matt needs to find a router that does IP binding on the load balancing if he want's to still be able to use NLB. Something which the linksys doesn't support... Leathal Actually, the Linksys RV082 does support that. I have set that up before and its not hard to setup. You shouldn't have to setup anything other than enabling it which is how it's done in the industry. The firewall itself should be smart enough to know how to use it otherwise you have a problem. 
Leathal | |
|
| | | |
Matt
Take me down to the paradise city
Premium
join:2003-07-20
Jamestown, NC
·North State Commun..
| Re: Dual-WAN Router - Traffic Control? said by Leathal :said by Nightfall :said by Leathal :that's why Matt needs to find a router that does IP binding on the load balancing if he want's to still be able to use NLB. Something which the linksys doesn't support... Leathal Actually, the Linksys RV082 does support that. I have set that up before and its not hard to setup. You shouldn't have to setup anything other than enabling it which is how it's done in the industry. The firewall itself should be smart enough to know how to use it otherwise you have a problem. Leathal According to the manual, the RV042 supports this too. It's a simple firewall setting.
As far as "enabling it" since when did Zywall and Sonicwall obtain the ability to read minds? How do they know I want my streaming radio station to go out over WAN2 instead of WAN1? Why hasn't this technology been paraded? I think you're confusing my question with sticky sessions. They are two different things. | |
|
| | | | |
Nightfall
My Goal Is To Deny Yours
Premium,MVM
join:2001-08-03
Grand Rapids, MI
·Comcast
·AT&T Midwest
·Site5.com
| Re: Dual-WAN Router - Traffic Control? said by Matt :According to the manual, the RV042 supports this too. It's a simple firewall setting. As far as "enabling it" since when did Zywall and Sonicwall obtain the ability to read minds? How do they know I want my streaming radio station to go out over WAN2 instead of WAN1? Why hasn't this technology been paraded? I think you're confusing my question with sticky sessions. They are two different things. Thats correct Matt.
Setting this up in the Linksys unit is so easy. In fact, you do have to setup a rule like this in ANY ROUTER that you want to have the flow of one specific kind of traffic go through one connection.
If you don't set this up, then the load balancing does as it was designed to do which is use the connection that is the least utilized. This can be bad in terms of secure connections like HTTPS which is why all secure connections should go through one of your two connections. Switching it over is a simple drop down selection in the router if you have a line outage.
All dual WAN routers I have setup have this ability and are just as easy to implement.
--
My domain - Nightfall.net | |
|
| | | | |
Leathal
Premium
join:2002-02-09
Toronto, ON
1 edit | said by Matt :According to the manual, the RV042 supports this too. It's a simple firewall setting. As far as "enabling it" since when did Zywall and Sonicwall obtain the ability to read minds? How do they know I want my streaming radio station to go out over WAN2 instead of WAN1? Why hasn't this technology been paraded? I think you're confusing my question with sticky sessions. They are two different things. It's simple you are confusing the basic principle of how IP binding works.
IP binding takes the destination IP address and binds it to the WAN port it connects through initially until the session is closed.
So if you are requesting a audio stream from di.fm through your winamp and the firewall talks to DI's servers on WAN2 initially it will automatically bind the IP to WAN2 until the session is closed. Not having IP binding enabled allows the load balance to randomly decide which WAN port it will request additional information from automatically.
Basically you have to remember, what goes out must come in. In the case of HTTPS connections servers bind your incoming connection to your IP address (like Nightfall said) if you are not binding the IP address on your firewall then the load balance "may" decide to use the opposite WAN port on the next request and the session will be terminated by the destination server.
Leathal | |
|
| | | | | |
Matt
Take me down to the paradise city
Premium
join:2003-07-20
Jamestown, NC
·North State Commun..
| Re: Dual-WAN Router - Traffic Control? That is called sticky connections. You may refer to it as IP binding, although I would disagree as that implies something completely different to me.
I was asking if I could tell the router to send all traffic out a specific WAN port. For example, if I ALWAYS wanted my streaming radio connection to go out WAN2 rather than load balance it and randomly assign it to a WAN port. You are misunderstanding what I am asking for. | |
|
| | | | | | |
Leathal
Premium
join:2002-02-09
Toronto, ON
1 edit | Re: Dual-WAN Router - Traffic Control? said by Matt :That is called sticky connections. You may refer to it as IP binding, although I would disagree as that implies something completely different to me. I was asking if I could tell the router to send all traffic out a specific WAN port. For example, if I ALWAYS wanted my streaming radio connection to go out WAN2 rather than load balance it and randomly assign it to a WAN port. You are misunderstanding what I am asking for. I don't think you can do that without having load balance turned on because if you disable load balancing the 2nd WAN becomes a backup WAN which most firewall don't allow normal or otherwise configured traffic to pass-through it because it's in stand by mode.
And what you have load balance turned you have to make sure IP binding (as sonicwall calls it) sticky session is enabled.
Leathal
| |
|
| | | | | | | |
Matt
Take me down to the paradise city
Premium
join:2003-07-20
Jamestown, NC
·North State Commun..
| Re: Dual-WAN Router - Traffic Control? said by Leathal :I don't think you can do that without having load balance turned on because if you disable load balancing the 2nd WAN becomes a backup WAN which most firewall don't allow normal or otherwise configured traffic to pass-through it because it's in stand by mode. You can do that. That is what I said I looked up in the Linksys RV042 manual.
I decided to go about it a different way that doesn't even require a load balancing router (because I don't want load balancing) by just manipulating my routing tables. | |
|
| | | | | | | | |
Nightfall
My Goal Is To Deny Yours
Premium,MVM
join:2001-08-03
Grand Rapids, MI
·Comcast
·AT&T Midwest
·Site5.com
2 edits | Re: Dual-WAN Router - Traffic Control? said by Matt :said by Leathal :I don't think you can do that without having load balance turned on because if you disable load balancing the 2nd WAN becomes a backup WAN which most firewall don't allow normal or otherwise configured traffic to pass-through it because it's in stand by mode. You can do that. That is what I said I looked up in the Linksys RV042 manual. I decided to go about it a different way that doesn't even require a load balancing router (because I don't want load balancing) by just manipulating my routing tables. The straight scoop is that you can accomplish this in the Linksys model. You don't need to go out and buy a Zyxel or Sonicwall like Lethal has said. Load balancing on or not, you can specify the traffic to go out one interface or the other. Heck, when I had a dual WAN connection, I had all the FTP traffic going out the second connection. I disconnected the second connection and about 3 days later was trying to figure out why my FTP sessions weren't working. I literally had to go into the router and turn off that rule.
Ah well.
--
My domain - Nightfall.net | |
|
| | | | | | | | | |
|
Bink
join:2006-05-14
Denver, CO
·Qwest.net
| I have to concur with tubbynet . Even the consumer-class devices still use some kind of rule-based or ACL-based method to point the traffic to where you want it to go—it just might be hidden behind a “friendly” GUI. | |
|
|
Matt
Take me down to the paradise city
Premium
join:2003-07-20
Jamestown, NC | Re: Dual-WAN Router - Traffic Control? Thanks guys. It looks like the RV042 does what I need. For clarification, I don't mind creating say, one rule for all HTTPS traffic. I absolutely wanted to avoid having to create a hackish rule for each website I wanted to visit. | |
|
| |
Leathal
Premium
join:2002-02-09
Toronto, ON | Re: Dual-WAN Router - Traffic Control? You may have to look at something more expensive to do IP binding on NLB such a Zywall, or SonicWALL, I am sure there other products with at the same hardware/software level as those who support IP binding.
Leathal | |
|
|
|
|
|
·
·