PCC loadbalancing and vpn connection

hello Sir,
Hello all I am a newbie Mikrotik user.
I have some questions to ask in this forum. I use PCC method load balancing with mikrotik CCR-1036 at my work. I have 2 wan different ISP and 2 LAN.
It is work but i would like to known that when VPN user trying to connect their SSL server it can be trouble or not. Because some says PCC method cannot support some SSL connections smoothly. Please advice me how to do it.My PCC configuration is like that —

0 chain=input action=mark-connection new-connection-mark=WAN1 passthrough=no
connection-mark=no-mark in-interface=ether1-MPT log=no log-prefix=“”

1 chain=input action=mark-connection new-connection-mark=WAN2 passthrough=no
connection-mark=no-mark in-interface=ether2-FTR log=no log-prefix=“”

2 chain=output action=mark-routing new-routing-mark=WAN1 passthrough=no
connection-mark=WAN1 log=no log-prefix=“”

3 chain=output action=mark-routing new-routing-mark=WAN2 passthrough=no
connection-mark=WAN2 log=no log-prefix=“”

4 chain=prerouting action=accept dst-address=x.x.x.x/30 log=no
log-prefix=“”

5 chain=prerouting action=accept dst-address=x.x.x.x/30 log=no
log-prefix=“”

6 chain=prerouting action=mark-connection new-connection-mark=WAN1
passthrough=yes dst-address-type=!local connection-mark=no-mark
in-interface=all-ethernet per-connection-classifier=both-addresses:3/0
log=no log-prefix=“”

7 chain=prerouting action=mark-connection new-connection-mark=WAN2
passthrough=yes dst-address-type=!local connection-mark=no-mark
in-interface=all-ethernet per-connection-classifier=both-addresses:3/1
log=no log-prefix=“”

8 chain=prerouting action=mark-connection new-connection-mark=WAN1
passthrough=yes dst-address-type=!local connection-mark=no-mark
in-interface=all-ethernet per-connection-classifier=both-addresses:3/2
log=no log-prefix=“”

9 chain=prerouting action=mark-routing new-routing-mark=WAN1 passthrough=no
connection-mark=WAN1 in-interface=all-ethernet log=no log-prefix=“”

10 chain=prerouting action=mark-routing new-routing-mark=WAN2 passthrough=no
connection-mark=WAN2 in-interface=all-ethernet log=no log-prefix=“” :slight_smile: :slight_smile:

The easiest way would be to set your per-connection-classifier to src-address only.
Frankly, this sort of breaks the load balancing in a way that each client is locked to one WAN link - means that every connection from a specific client is leaving through the same WAN interface. But this will eliminate your issues reliably.

-Chris

I appreciate your advice and thanks a lot sir.

hello, i know this might be out of topic but i try to load balance using ecmp with 2 links but the traffic that I make is only goes to ISP1. does ecmp work this way? shouldnt the packets divided to ISP1 and ISP2? anybody please help