Topic 'Re: Dual-WAN Router - Traffic Control?' in forum 'Networking' - dslreports.com http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22578699 en Fri, 10 Feb 2012 16:21:23 EDT Fri, 10 Feb 2012 16:21:23 EDT Re: Dual-WAN Router - Traffic Control? http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22648232 said by Nightfall:

The straight scoop is that you can accomplish this in the Linksys model. You don't need to go out and buy a Zyxel or Sonicwall like Lethal has said.
thats true, but nothing looks sexier than a cisco isr sitting on the desk passing packets ;-)
mmmm....loves me some dynamic policy nat...

[edit]
additionally, with cisco devices you could set up ip-sla to monitor your outgoing interfaces with something like a set of pings. if the pings are dropped by one interface, it will report as down to the router and take all traffic that was exiting the interface that went down and push it out the interface that is still standing.

q.
--
"...if I in my north room dance naked, grotesquely before my mirror waving my shirt round my head and singing softly to myself..."]]> http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22648232 Fri, 03 Jul 2009 01:13:00 EDT Re: Dual-WAN Router - Traffic Control? http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22646389 said by Matt:

said by Leathal:

I don't think you can do that without having load balance turned on because if you disable load balancing the 2nd WAN becomes a backup WAN which most firewall don't allow normal or otherwise configured traffic to pass-through it because it's in stand by mode.
You can do that. That is what I said I looked up in the Linksys RV042 manual.

I decided to go about it a different way that doesn't even require a load balancing router (because I don't want load balancing) by just manipulating my routing tables.
The straight scoop is that you can accomplish this in the Linksys model. You don't need to go out and buy a Zyxel or Sonicwall like Lethal has said. Load balancing on or not, you can specify the traffic to go out one interface or the other. Heck, when I had a dual WAN connection, I had all the FTP traffic going out the second connection. I disconnected the second connection and about 3 days later was trying to figure out why my FTP sessions weren't working. I literally had to go into the router and turn off that rule.

Ah well.
--
My domain - Nightfall.net]]> http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22646389 Thu, 02 Jul 2009 17:31:43 EDT Re: Dual-WAN Router - Traffic Control? http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22646264 said by Leathal:

I don't think you can do that without having load balance turned on because if you disable load balancing the 2nd WAN becomes a backup WAN which most firewall don't allow normal or otherwise configured traffic to pass-through it because it's in stand by mode.
You can do that. That is what I said I looked up in the Linksys RV042 manual.

I decided to go about it a different way that doesn't even require a load balancing router (because I don't want load balancing) by just manipulating my routing tables.]]> http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22646264 Thu, 02 Jul 2009 17:09:04 EDT Re: Dual-WAN Router - Traffic Control? http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22646254 said by Matt:

That is called sticky connections. You may refer to it as IP binding, although I would disagree as that implies something completely different to me.

I was asking if I could tell the router to send all traffic out a specific WAN port. For example, if I ALWAYS wanted my streaming radio connection to go out WAN2 rather than load balance it and randomly assign it to a WAN port. You are misunderstanding what I am asking for.
I don't think you can do that without having load balance turned on because if you disable load balancing the 2nd WAN becomes a backup WAN which most firewall don't allow normal or otherwise configured traffic to pass-through it because it's in stand by mode.

And what you have load balance turned you have to make sure IP binding (as sonicwall calls it) sticky session is enabled.

Leathal
]]> http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22646254 Thu, 02 Jul 2009 17:07:23 EDT Re: Dual-WAN Router - Traffic Control? http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22646237
I was asking if I could tell the router to send all traffic out a specific WAN port. For example, if I ALWAYS wanted my streaming radio connection to go out WAN2 rather than load balance it and randomly assign it to a WAN port. You are misunderstanding what I am asking for.]]> http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22646237 Thu, 02 Jul 2009 17:03:53 EDT Re: Dual-WAN Router - Traffic Control? http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22646227 said by Matt:

According to the manual, the RV042 supports this too. It's a simple firewall setting.

As far as "enabling it" since when did Zywall and Sonicwall obtain the ability to read minds? How do they know I want my streaming radio station to go out over WAN2 instead of WAN1? Why hasn't this technology been paraded? I think you're confusing my question with sticky sessions. They are two different things.
It's simple you are confusing the basic principle of how IP binding works.

IP binding takes the destination IP address and binds it to the WAN port it connects through initially until the session is closed.

So if you are requesting a audio stream from di.fm through your winamp and the firewall talks to DI's servers on WAN2 initially it will automatically bind the IP to WAN2 until the session is closed. Not having IP binding enabled allows the load balance to randomly decide which WAN port it will request additional information from automatically.

Basically you have to remember, what goes out must come in. In the case of HTTPS connections servers bind your incoming connection to your IP address (like Nightfall said) if you are not binding the IP address on your firewall then the load balance "may" decide to use the opposite WAN port on the next request and the session will be terminated by the destination server. :)

Leathal]]> http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22646227 Thu, 02 Jul 2009 17:01:12 EDT Re: Dual-WAN Router - Traffic Control? http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22644739 said by Matt:

According to the manual, the RV042 supports this too. It's a simple firewall setting.

As far as "enabling it" since when did Zywall and Sonicwall obtain the ability to read minds? How do they know I want my streaming radio station to go out over WAN2 instead of WAN1? Why hasn't this technology been paraded? I think you're confusing my question with sticky sessions. They are two different things.
Thats correct Matt.

Setting this up in the Linksys unit is so easy. In fact, you do have to setup a rule like this in ANY ROUTER that you want to have the flow of one specific kind of traffic go through one connection.

If you don't set this up, then the load balancing does as it was designed to do which is use the connection that is the least utilized. This can be bad in terms of secure connections like HTTPS which is why all secure connections should go through one of your two connections. Switching it over is a simple drop down selection in the router if you have a line outage.

All dual WAN routers I have setup have this ability and are just as easy to implement.
--
My domain - Nightfall.net]]> http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22644739 Thu, 02 Jul 2009 12:07:16 EDT Re: Dual-WAN Router - Traffic Control? http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22644218 said by Leathal:

said by Nightfall:

said by Leathal:

that's why Matt needs to find a router that does IP binding on the load balancing if he want's to still be able to use NLB. Something which the linksys doesn't support...

Leathal
Actually, the Linksys RV082 does support that. I have set that up before and its not hard to setup.
You shouldn't have to setup anything other than enabling it which is how it's done in the industry. The firewall itself should be smart enough to know how to use it otherwise you have a problem. :-)

Leathal
According to the manual, the RV042 supports this too. It's a simple firewall setting.

As far as "enabling it" since when did Zywall and Sonicwall obtain the ability to read minds? How do they know I want my streaming radio station to go out over WAN2 instead of WAN1? Why hasn't this technology been paraded? I think you're confusing my question with sticky sessions. They are two different things.]]> http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22644218 Thu, 02 Jul 2009 10:28:45 EDT Re: Dual-WAN Router - Traffic Control? http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22643909 said by Nightfall:

said by Leathal:

that's why Matt needs to find a router that does IP binding on the load balancing if he want's to still be able to use NLB. Something which the linksys doesn't support...

Leathal
Actually, the Linksys RV082 does support that. I have set that up before and its not hard to setup.
You shouldn't have to setup anything other than enabling it which is how it's done in the industry. The firewall itself should be smart enough to know how to use it otherwise you have a problem. :-)

Leathal]]> http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22643909 Thu, 02 Jul 2009 09:35:03 EDT Re: Dual-WAN Router - Traffic Control? http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22643879 said by Leathal:

that's why Matt needs to find a router that does IP binding on the load balancing if he want's to still be able to use NLB. Something which the linksys doesn't support...

Leathal
Actually, the Linksys RV082 does support that. I have set that up before and its not hard to setup.
--
My domain - Nightfall.net]]> http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22643879 Thu, 02 Jul 2009 09:24:20 EDT Re: Dual-WAN Router - Traffic Control? http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22643772
Leathal]]> http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22643772 Thu, 02 Jul 2009 08:59:12 EDT Re: Dual-WAN Router - Traffic Control? http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22643762
Leathal]]> http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22643762 Thu, 02 Jul 2009 08:56:42 EDT Re: Dual-WAN Router - Traffic Control? http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22582131 http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22582131 Sat, 20 Jun 2009 07:46:23 EDT Re: Dual-WAN Router - Traffic Control? http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22580413 See Profile. Even the consumer-class devices still use some kind of rule-based or ACL-based method to point the traffic to where you want it to go—it just might be hidden behind a “friendly” GUI.]]> http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22580413 Fri, 19 Jun 2009 20:04:51 EDT Re: Dual-WAN Router - Traffic Control? http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22580256 nothing is more powerful than an acess-list and route-maps!

:D

q.
--
"...if I in my north room dance naked, grotesquely before my mirror waving my shirt round my head and singing softly to myself..."]]> http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22580256 Fri, 19 Jun 2009 19:29:32 EDT Re: Dual-WAN Router - Traffic Control? http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22580249
I have done this before. In one example, I had HTTPS traffic flowing through one of the two connections. Mainly because load balancing HTTPS traffic is hard to do. Most secure sites remember one IP address for a transaction or when you are filling out a form. Having that data load balance may trip the security and cause a HTTPS error.

So it is possible yes. :)
--
My domain - Nightfall.net]]> http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22580249 Fri, 19 Jun 2009 19:27:27 EDT Re: Dual-WAN Router - Traffic Control? http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22580202 quote:
For those of you with Dual-WAN routers, what sort of control do you have over your traffic?


Limit specific IP address and/or ports and/or types of traffic (deep packet inspection) to a single link.

Specify what percentage of traffic is sent over each outgoing link based on src and/or destination ip address and/or port

Load balance each link based on static bandwidth.

Load balance each link based on actually measured bandwidth.

Detect upstream blackhole and reroute all traffic to the remaining link.

Use QoS to route traffic to the least used link or to separate traffic keeping high priority traffic in the front of the queue on a given link.

There are a few more features but I have not really used them.]]> http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22580202 Fri, 19 Jun 2009 19:17:51 EDT Re: Dual-WAN Router - Traffic Control? http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22580154 said by drew:

Interestingly enough, I think he might be purchasing a RV042 here soon ;)
hax0r! r u in mi internets?]]> http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22580154 Fri, 19 Jun 2009 19:08:43 EDT Re: Dual-WAN Router - Traffic Control? http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22579935
More likely VoIP traffic than VNC, but you get the idea.

Interestingly enough, I think he might be purchasing a RV042 here soon ;)
--
Come play Mafia! | My Picture Blog]]> http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22579935 Fri, 19 Jun 2009 18:22:12 EDT Re: Dual-WAN Router - Traffic Control? http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22579779
Click for full size
]]> http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22579779 Fri, 19 Jun 2009 17:52:25 EDT Re: Dual-WAN Router - Traffic Control? http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22579519 http://www.dslreports.com/forum/Re-DualWAN-Router-Traffic-Control-22579519 Fri, 19 Jun 2009 17:03:43 EDT Dual-WAN Router - Traffic Control? http://www.dslreports.com/forum/DualWAN-Router-Traffic-Control-22578699 http://www.dslreports.com/forum/DualWAN-Router-Traffic-Control-22578699 Fri, 19 Jun 2009 14:35:57 EDT