On 12/10/2013 10:38 a.m., Beto Moreno wrote:
Them I have get help from my firewall, right?
Yes. It is no use Squid separating traffic into from-yyy.* and
from-xxx.* groups if the firewall and routing layer is sending
everything out ISP1. At most upper layer software like Squid can send IP
address, TOS/DiffServ or iptables MARK labels to the kernel as hints to
aid routing decisions. It cannot make those decisions itself.
Please read that link which was supplied earlier.
Amos
On Fri, Oct 11, 2013 at 12:28 PM, Alex Domoradov wrote:
does this setting tcp_outgoing_address can help me?
yes, it does, but you need to configure PBR (Policy Base Routing). You
can find more at
http://lartc.org/howto/lartc.rpdb.multiple-links.html#AEN298
acl user_of_dep1 src 192.168.1.0/24
acl user_of_dep2 src 192.168.2.0/24
acl user_of_dep3 src 192.168.3.0/24
tcp_outgoing_address xxx.xxx.xxx.xxx user_of_dep1
tcp_outgoing_address yyy.yyy.yyy.yyy user_of_dep2
On Fri, Oct 11, 2013 at 9:24 PM, Beto Moreno <pamrtj@xxxxxxxxx> wrote:
Hi.
My friends, I have a server with 2 ISP, I want to move some users to
use ISP-1 and others ISP-2, does this setting tcp_outgoing_address can
help me?
Squid 3.1.x.
I want this:
user-1 gw-1->isp-1
user-2 gw-2->isp-2
Thanks.
