Community discussions

MikroTik App
 
unridaz
newbie
Topic Author
Posts: 34
Joined: Tue Mar 19, 2013 11:48 pm

Load balancing question

Sat Dec 21, 2013 2:22 am

Hello,

I have setup two VPN tunnels using a VPN appliance which are on my LAN at 10.4.0.3 and 10.4.0.4.

These tunnels terminate to appliances on the other side, and are also in the same LAN at 10.1.100.3 and 10.1.100.4.

What I would like to do is add a routerboard device in front of the VPN appliances at say 10.4.0.2 and 10.1.100.2 respectively, which will load balance connections which try to use the VPN tunnels.

At first I had this setup using 'Nth' and counting packets as 2,1 and 2,2. This worked rather well for pinging, but when I tried to use an actual application like RDP or something else, it was switching routes too fast for communication to be established.

Is there another method of loadbalancing that may be better suited for my design?

I think what I need help with is marking packets properly with Mangle. I'd really love to just do the marking on one side, and then pickup those marks on the other side... is this possible?

Thanks!
 
noib
Member Candidate
Member Candidate
Posts: 287
Joined: Fri Jan 25, 2013 6:04 pm
Location: France
Contact:

Re: Load balancing question

Tue Dec 24, 2013 12:28 am

Did you try bonding your links ?
http://wiki.mikrotik.com/wiki/Bonding
 
aaronhun22
Frequent Visitor
Frequent Visitor
Posts: 97
Joined: Fri Nov 15, 2013 2:15 am
Location: Las Vegas, Nevada, USA

Re: Load balancing question

Tue Dec 24, 2013 1:25 am

You can only use the Nth rule in routing when marking new connections because all packets need to have the correct source address when responding.
 
nerdtron
Member Candidate
Member Candidate
Posts: 123
Joined: Sat Nov 30, 2013 7:49 am

Re: Load balancing question

Thu Dec 26, 2013 10:21 am

You can't use a vpn channel on constantly changing/switching connection unless you have a way to have the same source address when you switch connection. So either you setup a failover setup or if you have two links, you can have one vpn tunnel each.

Who is online

Users browsing this forum: Bing [Bot], Google [Bot], meazz1, ZacharyMak and 115 guests