Community discussions

MikroTik App
 
User avatar
eugenevdm
Member Candidate
Member Candidate
Topic Author
Posts: 208
Joined: Tue Jun 01, 2004 12:23 pm
Location: Stellenbosch, South Africa
Contact:

Load Balancing Port 80 Using Transparent Proxy

Sat Sep 09, 2006 6:43 pm

I would like to load balance Mikrotik across multiple lines but also have a transparent proxy.

Something that will help me with:

ADSL Line #1 <masq> ADSL Route #1 <-> MT/Transparent Proxy <-> Clients
ADSL Line #2 <masq> ADSL Route #2
ADSL Line #3 <masq> ADSL Route #3

Does anyone have an example of such a configuration?
 
User avatar
eugenevdm
Member Candidate
Member Candidate
Topic Author
Posts: 208
Joined: Tue Jun 01, 2004 12:23 pm
Location: Stellenbosch, South Africa
Contact:

Tue Sep 12, 2006 8:52 pm

* bump *

Could someone confirm running a transparent proxy server on Mikrotik AND load balancing is not possible using the above configuration?
 
savage
Forum Guru
Forum Guru
Posts: 1264
Joined: Mon Oct 18, 2004 12:07 am
Location: Cape Town, South Africa
Contact:

Fri Sep 15, 2006 6:49 pm

The src-address of the request going from the proxy server to the internet will always be the same, so no, it's not possible.

A dedicated proxy server connected to all three dsl lines (vlans, nics, take your pic), will however work, provided it is configured correctly. And yes, it could still be done transparently as well
 
User avatar
eugenevdm
Member Candidate
Member Candidate
Topic Author
Posts: 208
Joined: Tue Jun 01, 2004 12:23 pm
Location: Stellenbosch, South Africa
Contact:

Sat Sep 16, 2006 12:08 am

The src-address of the request going from the proxy server to the internet will always be the same, so no, it's not possible.
So are you saying that with source routing it will not work because of "fixed" output chain address - what about destination policy routing?
A dedicated proxy server connected to all three dsl lines (vlans, nics, take your pic), will however work, provided it is configured correctly. And yes, it could still be done transparently as well
When you say dedicated proxy server, do you mean MT proxy or some other operating system. What about this config:

________________________________Router A_____________Router B
ADSL Line #1 <masq> PPPoE1 <-> Destination Routing <-> MT/Transparent Proxy <-> Clients
ADSL Line #2 <masq> PPPoE2 <-> Destination Routing <->
ADSL Line #3 <masq> PPPoE3 <-> Destination Routing <->
 
savage
Forum Guru
Forum Guru
Posts: 1264
Joined: Mon Oct 18, 2004 12:07 am
Location: Cape Town, South Africa
Contact:

Sat Sep 16, 2006 12:22 am

Will work with destination policies yes...

A dedicated Squid system, you can supply multiple listen addresses (one connected to each router doing destination routing. Disable IP Forwarding on the proxy, and tell the proxy to use a src address that is the same as the interface address where the request came in from (You will need the latest version of Squid to accomplish this).

Thus a request coming in on Interface1 of the proxy (i.e. on PPPoE1), will always go to the Internet via PPPoE1, a request on PPPoE2, will always go out via PPPoE2, etc etc etc.

The result would be that the proxy is completely independant on what ever you do in regards to src or dst routing. The proxy will *always* go out on the same interface (i.e. network) that the request came in from. Your src-address will however still be over written which might cause problems on traffic queues...

Essentially you have one proxy, connected to three different networks...
ADSL Line #1 <masq> PPPoE1 <P VLAN 1> Destination Routing <-> MT <-> Clients
ADSL Line #2 <masq> PPPoE2 <P VLAN 2> Destination Routing <->
ADSL Line #3 <masq> PPPoE3 <P VLAN 3> Destination Routing <->

I would also never recomment a MT proxy be used due to the limitations in the performance, as well as the configuration options available in MT. Even a low end systems running a up to date version of Squid, with a properly optimised configuration file will outperform MT by far... Just getting decent refresh_patterns in place on Squid can make a significant increase in performance.
 
User avatar
eugenevdm
Member Candidate
Member Candidate
Topic Author
Posts: 208
Joined: Tue Jun 01, 2004 12:23 pm
Location: Stellenbosch, South Africa
Contact:

Sun Sep 17, 2006 1:54 pm

thank you savage for your reply and I might contact you in the future to help me with such a "Squid" implementation.

However generally I prefer to not use a third party products to do transparent proxy / load balancing since I am already using Mikrotik and Mikrotik has both these features built in. Does Mikrotik have any plans to get transparent proxy with load balancing working?

Who is online

Users browsing this forum: Bing [Bot] and 117 guests