Re: Selective Masquerading

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Anthony:

On Saturday 24 April 2004 5:14 pm, Edgar Estrada Lopez wrote:


> HI guys:
>
> I have a DSL @ 1mb, and another one @ 256kbps
>
> While giving a deep thought on why I got the 2 dsl, the answer is simple:
> So I could have fast downloads, and fast web browsing also.
>
> So I was thinking: is there a way to masquerade / direct all web browsing
> to the 256dsl, and leave the rest of the communications (higher ports) to
> the 1 mbps line?


I'm sure you can do this either with iproute2 on its own, or if not then
certainly by routing packets based on a MARK, and MARKing them in netfilter
based on destination port number.


I've already read / tried all LARTC split-access howto -- no luck.


I can even have both interfaces up and runninng -- but my default route must point to only one -- the moment I add the equalized route (ip route add default equalize nexthop xxx.xxx.xxx.xxx via ethx nexthop......) then one of the DSL begins an AWFUL ARP flood, and no more communications occur (pinging to a know host equals 'destination host unreachable').

I haven't tried the MARKing, though.

However, I have to ask - what sort of traffic are you generating which can use
a 1Mbps line for "downloads", which is not HTTP? I realise that you could
be using FTP, or rsync, however I suspect you mean p2p networking, and you
should check that this really isn't using TCP port 80 - otherwise there's no
way of distinguishing the two types of traffic.

Yes, I do mostly FTP - P2P - BT traffic -- all those use differnt ports



Of course the other way to do it would be to use an HTTP proxy such as Squid
which has a default route pointing up the 256k DSL, and the default gateway
for other machines going up the 1M DSL...



Haven't tried Squid either ....


What do you suggest? MARKing or Squid ?? I think MARKing would be clearer since it is not a proxy but a routing...

Thank you for your time.

- Ed

_________________________________________________________________
MSN. Más Útil Cada Día  http://www.msn.es/intmap/



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux