My research came to the same conclusion. Conntrack tracks the UDP stream and puts all related packets to the same interface. The UDP stream shows up in /proc/net/ip_conntrack. Unfortunately, I cannot test without loading conntrack. The UDP stream producer uses TCP connections to coordinate with the other end. The TCP connections require conntrack. It appears my only option is to modify conntrack. Any other opinions? > I'm not an expert in this area, but i believe the per-stream affinity > to a given interface is because of conntrack. You could test this > before expending a great deal of energy by not loading conntrack, and > seeing it it still sticks to one nic. > > Sofar as dynamically bypassing a loaded module for some traffic (UDP) > but not all, good luck. I've never even thought of that before just > now. > > On Fri, Jul 25, 2008 at 08:22, Barry A Rich <barich@xxxxxxxxxxxxxx> wrote: > > Bonding is not required in this case. The system that receives the UDP > stream does not care if the UDP packets have different source IP addresses. > NAT would not be required in this case, but the ISP might drop packets if the > source address does not match the uplink address. > > > > Given those assumptions, what's the best way to load balance across the > uplinks? If netfilter cannot be configured to do this, can I change > ip_conntrack to ignore UDP packets? > > > >> > >> Why would it need to be tracked? Are you using NAT? NAT necessarily > >> must assign one public address to the outgoing connection as it > >> traverses the router. Therefore, unless all three uplinks can be > >> bonded together to have the same IP address, you can not do that. > >> > >> On Thu, Jul 24, 2008 at 20:23, Barry A Rich <barich@xxxxxxxxxxxxxx> wrote: > >> > I've configured a kubuntu 8.04 PC as router with one LAN interface and > three > >> > Internet uplinks. A UDP stream is being produced on the LAN. I'd like the > >> > UPD packets from the stream to be load balanced across the uplinks. > >> > Currently, the UDP stream is tracked as a single connection and all the > UPD > >> > packets are sent to the same uplink. What's the best way to accomplish > this? -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
