ENDIAN Firewall - balance 2 internet connection (multi ISP)

Quote from: hinge on Wednesday 02 September 2009, 08:08:12 pm

hi! everyone Grin

. i have some question about using of EFW 2.2 community. they have possible to make or they have a way can endian can balance 2 internet connections (multi-ISP).. thank you for answer..

Endian can load banlancing, but it not good .Endian use mechanism proxy caching, if you run load banlancing use mechanism router not caching.

You can modifications your endian run banlancing

1. Create a script to run at startup put in: /etc/rc.d/start/balancing99startup

# --- Begin balancing99startup ---
#!/bin/sh

/etc/init.d/balancingstartup start

exit 0
# --- End balancing99startup ---

2. Create test scenarios and change the default gateway put in: /etc/rc.d/init.d/~~checkgateway~~(change)balancingstartup

2. Create test scenarios and change the default gateway put in: /etc/rc.d/init.d/balancingstartup

# --- Begin checkgateway ---
#!/bin/sh

PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin
CHECKGATEWAYLOG=/var/log/gatewaystatus

command="$1"

case "$command" in
start)
echo "Starting modifications routing"
if [ -f $CHECKGATEWAYLOG ]; then
/bin/rm $CHECKGATEWAYLOG
fi
/usr/local/sbin/balancing & > /dev/null 2>&1
echo $! > /usr/local/share/balancing.pid
date +"----- Starting modifications routing ----- (%D %T)" >> $CHECKGATEWAYLOG

;;
stop)
echo "Stoping modifications routing"
if [ -f $CHECKGATEWAYLOG ]; then
/bin/rm $CHECKGATEWAYLOG
fi
kill -9 $(cat /usr/local/share/balancing.pid) && rm /usr/local/share/balancing.pid
date +"----- Stoping modifications routing ----- (%D %T)" >> $CHECKGATEWAYLOG

;;
*)
# --- echo "Usage /etc/init.d/~~checkgateway~~(change)balancingstartup start|stop"
echo "Usage /etc/init.d/balancingstartup start|stop"
;;
esac

# --- End checkgateway ---

3. Scripting made simple load balancing put in: /usr/local/sbin/balancing

# --- Create for 3 Wan, you can custom modifications ---

# --- Begin balancing ---
#!/bin/bash

export PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin
PROG="balancing"
PROGDIR="/usr/local/sbin"
PROGSTATUS=000

# Configuration Variables

# ----- Begin Of Configuration -----

# Conventionally 0 indicates success in this script.

# Time between checks in seconds
SLEEPTIME=15

# IP Address or Domain name to ping. The script relies on the domain being
# Pingable and always available
# www.sf.net
CHECKHOST1=216.34.181.60
# www.yahoo.com
CHECKHOST2=209.131.36.158
# www.google.com
CHECKHOST3=208.67.216.231
# www.vnexpress.net
CHECKHOST4=210.245.0.22
# www.sourceforge.net
CHECKHOST5=216.34.181.60

# Total ping not available
CHECKNOTRETVAL=0

# If a ping detection does not receive normal response in standard time and the former state of the line is normal.
# When continuous ping detections do not receive normal responses, and the number exceed set number (default :3 ),
# then the state will change into "Break down ?off".
CHECKWEIGHT=3

# Ping timeout in seconds
TIMEOUT=3

# External interfaces (Change for your external interfaces)
EXTIF1=eth1
EXTIF2=eth2
EXTIF3=eth3

# IP address of external interfaces. This is not the gateway address. (Change for IP WAN your external interfaces)
IP1=192.168.1.254
IP2=192.168.2.254
IP3=192.168.3.254

# Gateway IP addresses. This is the first (hop) gateway, could be your router IP
# Address if it has been configured as the gateway. (Change for ip wan your gateway interfaces)
GW1=192.168.1.1
GW2=192.168.2.1
GW3=192.168.3.1

# Relative weights of routes. Keep this to a low integer value. I am using 1 for wan connection
WEIGHT1=1
WEIGHT2=1
WEIGHT3=1

# Broadband providers name; use your own names here.
NAME1=WAN1
NAME2=WAN2
NAME3=WAN3

# No of repeats of success or failure before changing status of connection
SUCCESSREPEATCOUNT=3
FAILUREREPEATCOUNT=1

# Do not change anything below this line

# Last link status indicates the macro status of the link we determined. This is down initially to force routing change upfront. Don't change these values.
LASTLINKSTATUS1=1
LASTLINKSTATUS2=1
LASTLINKSTATUS3=1

# Last ping status. Don't change these values.
LASTPINGSTATUS1=1
LASTPINGSTATUS2=1
LASTPINGSTATUS3=1

# Current ping status. Don't change these values.
CURRENTPINGSTATUS1=1
CURRENTPINGSTATUS2=1
CURRENTPINGSTATUS3=1

# Change link status indicates that the link needs to be changed. Don't change these values.
CHANGELINKSTATUS1=1
CHANGELINKSTATUS2=1
CHANGELINKSTATUS3=1

# Count of repeated up status or down status. Don't change these values.
COUNT1=0
COUNT2=0
COUNT3=0

# Log last load balancing routing status
CHECKGATEWAYLOG=/var/log/gatewaystatus

# ----- End Of Configuration -----

# Check all wan link status

while : ; do

for CHECKHOSTS in {$CHECKHOST1,$CHECKHOST2,$CHECKHOST3,$CHECKHOST4,$CHECKHOST5}
do
ping -W $TIMEOUT -I $IP1 -c 1 $CHECKHOSTS > /dev/null 2>&1
RETVAL=$?
if [ $RETVAL -ne 0 ]; then
CHECKNOTRETVAL=`expr $CHECKNOTRETVAL + 1`
fi
done

if [ $CHECKNOTRETVAL -ge $CHECKWEIGHT ]; then
RETVAL=1
else
RETVAL=0
fi

CHECKNOTRETVAL=0

if [ $RETVAL -ne 0 ]; then
echo Warning !!! $NAME1 Down
echo $PROGSTATUS
CURRENTPINGSTATUS1=1
else
CURRENTPINGSTATUS1=0
fi

if [ $LASTPINGSTATUS1 -ne $CURRENTPINGSTATUS1 ]; then
echo Ping status changed for $NAME1 from $LASTPINGSTATUS1 to $CURRENTPINGSTATUS1
COUNT1=1
else
if [ $LASTPINGSTATUS1 -ne $LASTLINKSTATUS1 ]; then
COUNT1=`expr $COUNT1 + 1`
fi
fi

if [[ $COUNT1 -ge $SUCCESSREPEATCOUNT || ($LASTLINKSTATUS1 -eq 0 && $COUNT1 -ge $FAILUREREPEATCOUNT) ]]; then
echo Uptime status will be changed for $NAME1 from $LASTLINKSTATUS1
CHANGELINKSTATUS1=0
COUNT1=0
if [ $LASTLINKSTATUS1 -eq 1 ]; then
LASTLINKSTATUS1=0
else
LASTLINKSTATUS1=1
fi
else
CHANGELINKSTATUS1=1
fi

LASTPINGSTATUS1=$CURRENTPINGSTATUS1

for CHECKHOSTS in {$CHECKHOST1,$CHECKHOST2,$CHECKHOST3,$CHECKHOST4,$CHECKHOST5}
do
ping -W $TIMEOUT -I $IP2 -c 1 $CHECKHOSTS > /dev/null 2>&1
RETVAL=$?
if [ $RETVAL -ne 0 ]; then
CHECKNOTRETVAL=`expr $CHECKNOTRETVAL + 1`
fi
done

if [ $CHECKNOTRETVAL -ge $CHECKWEIGHT ]; then
RETVAL=1
else
RETVAL=0
fi

CHECKNOTRETVAL=0

if [ $RETVAL -ne 0 ]; then
echo Warning !!! $NAME2 Down
echo $PROGSTATUS
CURRENTPINGSTATUS2=1
else
CURRENTPINGSTATUS2=0
fi

if [ $LASTPINGSTATUS2 -ne $CURRENTPINGSTATUS2 ]; then
echo Ping status changed for $NAME2 from $LASTPINGSTATUS2 to $CURRENTPINGSTATUS2
COUNT2=1
else
if [ $LASTPINGSTATUS2 -ne $LASTLINKSTATUS2 ]; then
COUNT2=`expr $COUNT2 + 1`
fi
fi

if [[ $COUNT2 -ge $SUCCESSREPEATCOUNT || ($LASTLINKSTATUS2 -eq 0 && $COUNT2 -ge $FAILUREREPEATCOUNT) ]]; then
echo Uptime status will be changed for $NAME2 from $LASTLINKSTATUS2
CHANGELINKSTATUS2=0
COUNT2=0
if [ $LASTLINKSTATUS2 -eq 1 ]; then
LASTLINKSTATUS2=0
else
LASTLINKSTATUS2=1
fi
else
CHANGELINKSTATUS2=1
fi

LASTPINGSTATUS2=$CURRENTPINGSTATUS2

for CHECKHOSTS in {$CHECKHOST1,$CHECKHOST2,$CHECKHOST3,$CHECKHOST4,$CHECKHOST5}
do
ping -W $TIMEOUT -I $IP3 -c 1 $CHECKHOSTS > /dev/null 2>&1
RETVAL=$?
if [ $RETVAL -ne 0 ]; then
CHECKNOTRETVAL=`expr $CHECKNOTRETVAL + 1`
fi
done

if [ $CHECKNOTRETVAL -ge $CHECKWEIGHT ]; then
RETVAL=1
else
RETVAL=0
fi

CHECKNOTRETVAL=0

if [ $RETVAL -ne 0 ]; then
echo Warning !!! $NAME3 Down
echo $PROGSTATUS
CURRENTPINGSTATUS3=1
else
CURRENTPINGSTATUS3=0
fi

if [ $LASTPINGSTATUS3 -ne $CURRENTPINGSTATUS3 ]; then
echo Ping status changed for $NAME3 from $LASTPINGSTATUS3 to $CURRENTPINGSTATUS3
COUNT3=1
else
if [ $LASTPINGSTATUS3 -ne $LASTLINKSTATUS3 ]; then
COUNT3=`expr $COUNT3 + 1`
fi
fi

if [[ $COUNT3 -ge $SUCCESSREPEATCOUNT || ($LASTLINKSTATUS3 -eq 0 && $COUNT3 -ge $FAILUREREPEATCOUNT) ]]; then
echo Uptime status will be changed for $NAME3 from $LASTLINKSTATUS3
CHANGELINKSTATUS3=0
COUNT3=0
if [ $LASTLINKSTATUS3 -eq 1 ]; then
LASTLINKSTATUS3=0
else
LASTLINKSTATUS3=1
fi
else
CHANGELINKSTATUS3=1
fi

LASTPINGSTATUS3=$CURRENTPINGSTATUS3

# Custom policy-based routing

if [[ $CHANGELINKSTATUS1 -eq 0 || $CHANGELINKSTATUS2 -eq 0 || $CHANGELINKSTATUS3 -eq 0 ]]; then
if [[ $LASTLINKSTATUS1 -eq 1 && $LASTLINKSTATUS2 -eq 1 && $LASTLINKSTATUS3 -eq 0 ]]; then
ip route flush cache
sleep $SLEEPTIME
echo Custom policy-based routing To 1 Wan - Switching To $NAME3
date +"----- Custom policy-based routing :: 1 Wan - $NAME3 (%D %T) -----" >> $CHECKGATEWAYLOG
PROGSTATUS=003
echo $PROGSTATUS
ip route replace default scope global via $GW2 dev $EXTIF2
ip route show | awk '{print}' >> $CHECKGATEWAYLOG
elif [[ $LASTLINKSTATUS1 -eq 1 && $LASTLINKSTATUS2 -eq 0 && $LASTLINKSTATUS3 -eq 1 ]]; then
ip route flush cache
sleep $SLEEPTIME
echo Custom policy-based routing To 1 Wan - Switching To $NAME2
date +"----- Custom policy-based routing :: 1 Wan - $NAME2 (%D %T) -----" >> $CHECKGATEWAYLOG
PROGSTATUS=002
echo $PROGSTATUS
ip route replace default scope global via $GW2 dev $EXTIF2
ip route show | awk '{print}' >> $CHECKGATEWAYLOG
elif [[ $LASTLINKSTATUS1 -eq 0 && $LASTLINKSTATUS2 -eq 1 && $LASTLINKSTATUS3 -eq 1 ]]; then
ip route flush cache
sleep $SLEEPTIME
echo Custom policy-based routing To 1 Wan - Switching To $NAME1
date +"----- Custom policy-based routing :: 1 Wan - $NAME1 (%D %T) -----" >> $CHECKGATEWAYLOG
PROGSTATUS=001
echo $PROGSTATUS
ip route replace default scope global via $GW1 dev $EXTIF1
ip route show | awk '{print}' >> $CHECKGATEWAYLOG
elif [[ $LASTLINKSTATUS1 -eq 1 && $LASTLINKSTATUS2 -eq 0 && $LASTLINKSTATUS3 -eq 0 ]]; then
ip route flush cache
sleep $SLEEPTIME
echo Custom policy-based routing To 2 Wan - Switching To $NAME2, $NAME3
date +"----- Custom policy-based routing :: 2 Wan - $NAME2, $NAME3 (%D %T) -----" >> $CHECKGATEWAYLOG
PROGSTATUS=023
echo $PROGSTATUS
ip route replace default scope global nexthop via $GW2 dev $EXTIF2 weight $WEIGHT2 nexthop via $GW3 dev $EXTIF3 weight $WEIGHT3
ip route show | awk '{print}' >> $CHECKGATEWAYLOG
elif [[ $LASTLINKSTATUS1 -eq 0 && $LASTLINKSTATUS2 -eq 0 && $LASTLINKSTATUS3 -eq 1 ]]; then
ip route flush cache
sleep $SLEEPTIME
echo Custom policy-based routing To 2 Wan - Switching To $NAME1, $NAME2
date +"----- Custom policy-based routing :: 2 Wan - $NAME1, $NAME2 (%D %T) -----" >> $CHECKGATEWAYLOG
PROGSTATUS=012
echo $PROGSTATUS
ip route replace default scope global nexthop via $GW1 dev $EXTIF1 weight $WEIGHT1 nexthop via $GW2 dev $EXTIF2 weight $WEIGHT2
ip route show | awk '{print}' >> $CHECKGATEWAYLOG
elif [[ $LASTLINKSTATUS1 -eq 0 && $LASTLINKSTATUS2 -eq 1 && $LASTLINKSTATUS3 -eq 0 ]]; then
ip route flush cache
sleep $SLEEPTIME
echo Custom policy-based routing To 2 Wan - Switching To $NAME1, $NAME3
date +"----- Custom policy-based routing :: 2 Wan - $NAME1, $NAME3 (%D %T) -----" >> $CHECKGATEWAYLOG
PROGSTATUS=013
echo $PROGSTATUS
ip route replace default scope global nexthop via $GW1 dev $EXTIF1 weight $WEIGHT1 nexthop via $GW3 dev $EXTIF3 weight $WEIGHT3
ip route show | awk '{print}' >> $CHECKGATEWAYLOG
elif [[ $LASTLINKSTATUS1 -eq 0 && $LASTLINKSTATUS2 -eq 0 && $LASTLINKSTATUS3 -eq 0 ]]; then
ip route flush cache
sleep $SLEEPTIME
echo Custom policy-based routing To 3 Wan - Switching To $NAME1, $NAME2, $NAME3
date +"----- Custom policy-based routing :: 3 Wan - $NAME1, $NAME2, $NAME3 (%D %T) -----" >> $CHECKGATEWAYLOG
PROGSTATUS=123
echo $PROGSTATUS
ip route replace default scope global nexthop via $GW1 dev $EXTIF1 weight $WEIGHT1 nexthop via $GW2 dev $EXTIF2 weight $WEIGHT2 nexthop via $GW3 dev $EXTIF3 weight $WEIGHT3
ip route show | awk '{print}' >> $CHECKGATEWAYLOG
fi
ip route flush cache
fi
sleep $SLEEPTIME
done

# --- End balancing ---

### Luck for you ###