PPTP-SERVER LOAD BALANCING

RouterOS General
1

Hello,

I was wondering is this possible, this is my situation:

Im using mikrotik as pptp concentrator, and its quite OK, but, how time is passing one PPTP server is not enough to cover number of users, when they are all logged on they have problems with badwidth, slow connectivity or response time, now, i would like to know is it possible to add another mikrotik pptp to this witch would balance users, but i want that IP address that users are using to connect to VPN stays the same e.g. 10.10.10.10 (i know i could add another server with 10.10.10.11 but i dont want to do that, its too much trouble in this situation)

So ? Is there any acceptible solution for me ?

2

it’s quite silly to use IPs as VPN server name… if you use textual names, then you simply add another IP in DNS, and connections to server(s) are load-balanced =)

3

now you can ‘hide’ your servers behind router with address 10.10.10.10, and then dst-nat vpn connections to your servers

4

round robin DNS helps

5

unfortunately, he uses IP, not domain name…

6

can anyone suggest some load balancing software for this ?

7

place PPTP servers behind NAT then randomly translate users requests to TCP 1723 between them

8

did that, but it hangs, ive got alots of pptp connections approx. 4000 and more, is there some better solution then nat ?

9

use FQDN names as PPTP server name (vpn.exapmle.com) + RR DNS

10

should work absolutely stable. what version did you use?

11

OK, im using RedHat EL 5 and installed IPVS+piranha, now, im having trouble with GRE… whenever i try to connect to PPTP i get disconnected with 691 error… any suggestion for iptable rules ?

12

ok, what has this have to do with MikroTik ?

13

they are behind piranha, and becouse mikrotik dones not offer any kind of solution for this problem (load sharing, or load balancing for pptp termination) i dont see what is the problem asking these questions ? when you create service for load sharing/balancing in mikrotik, there won’t be need to use other services/software etc.

14

I know, but this forum is strictly about mikrotik, please see FAQ

15

691 means incorrect user and/or password. I don’t see any reasons ROS or something else may affect this

16

pardon error: 619 i already said it cannot make GRE tunnel… not an user/pass error…

nevermind, close the topic. there won’t be any smart answer found here

17

wait… what’s problem with MT?..

18

you needed to NAT port 1723 and protocol 47 (GRE)… not just tcp/1723. This is the cause of the 619 error.

19

The “proper” way of doing this is RR DNS, and setup several boxes. Or, better yet, use MT as your PPTP server and pop in a something that can handle that many connections.