Dual Gateways, Transparent Proxy and 2.8x

Hi,

We’ve been using Mikrotik as our border router for several years with great results. However, after upgrading to 2.8x, we’ve noticed that we are unable to use dual gateways with transparent proxy. Prior to 2.8x the setup that worked was basically this:

  1. Setup transparent proxy

  2. Setup source nat masqerade rules in firewall

  3. Setup dual gateways in default route

As I mentioned before, all of this worked beautifully up to 2.8x. After we upgraded to 2.8x the proxy stopped using the dual gateways. Setting the default route back to a single gateway still works but loses the benefits of the extra bandwidth.

Anybody else notice this or have a workaround?

Thanks,

Bab Cossettes

I have the same problem. I asked the tech support, but they only recommended me either to turn off the web proxy and have the ability to use dual-gateways, or do the following:

  1. mark the traffic coming to the web proxy with some flow,
  2. route this traffic to the first gateway
  3. route other traffic through the second gateway.

I tried to do this, but still without success. How do you mangle the traffic “coming to the web proxy”? I tried this, but it doesn’t seem to mark the traffic well:

add src-address=192.168.1.0/24:8080 action=passthrough mark-connection=web-con
add dst-address=192.168.1.0/24:80 action=passthrough mark-connection=web-con
add connection=web-con action=passthrough mark-flow=web_flow

Is web_flow = the proxy traffic?

Any further hints or workarounds for this issue would be appreciated! Thanx!

http://www.mikrotik.com/docs/ros/2.8/ip/route||0.4442556084296397