Thursday, March 4, 2010

PfSense for Load Balance and MultiWan

Many Articles in the web telling how to make Multi Wan Connection for load balancing; one of them http://doc.pfsense.org/index.php/MultiWanVersion1.2
It actually describes the procedure well but one of the problem you would find when one of the WAN lines fail, there will be no Internet connection.
The reason is not because LoadBalancing fails but because DNS servers were not identified in the DHCP service.
Also I have to highlight that for Firewall rules...
  • Rules are evaluated in Top-Down approach at first match basis where there is a DenyAll is hidden in the most down .
  • Uses state; that means if a user requests a service from outside and it is permitted in the inside inteface, no need for declaring a rule in the outside interface.
  • Rules are identified in the inbound direction of interfaces.

CARP

"Common Address Redundancy Protocol" = Clustering
  • More redundancy for high availability.
  • Originally deployed under FreeBSD.
  • Seen when installing and configuring PfSense firewall.