[FUG-BR] Balance usando PF

[Luiz Gustavo S. Costa]

consertando a regra:

pass in log quick on $int_if route-to ($ext_if1 $ext_gw1) from
$int_if:network to any propability 30%
pass in log quick on $int_if route-to ($ext_if2 $ext_gw2) from
$int_if:network to any

2011/7/12 Luiz Gustavo S. Costa <luizgustavo em luizgustavo.pro.br>:
> No caso do probability, você faz um route-to para cada link
>
>> pass in log quick on $int_if route-to { ($ext_if1 $ext_gw1), ($ext_if2 \
>> $ext_gw2) } round-robin from $int_if:network to any flags S/SA keep state
>
> assim:
>
> pass in log quick on $int_if route-to ($ext_if1 $ext_gw1) from
> $int_if:network to any propability 30%
> pass in log quick on $int_if route-to ($ext_if1 $ext_gw1) from
> $int_if:network to any
>
> o que não passar pelo os 30% de um, cai nos 70% do outro (não precisa
> especificar o probability na segunda, porque 30% das conexões já caem
> na primeira, portanto, sobrando 70% para a outra)
>
> abraços
>
>
> 2011/7/12 Mario Lobo <lobo em bsd.com.br>:
>> On Tuesday 12 July 2011 15:53:34 Luiz Gustavo S. Costa wrote:
>>
>>> do man do pf.conf
>>
>>>
>>
>>> probability ⟨number⟩
>>
>>> A probability attribute can be attached to a rule, with a value
>>
>>> set between 0 and 1, bounds not included. In that case, the rule will be
>>
>>> honoured using the given probability value only. For example, the
>>
>>> following rule will drop 20% of incoming ICMP packets:
>>
>>>
>>
>>> block in proto icmp probability 20%
>>
>>>
>>
>>> então é usar um route-to com probability
>>
>>>
>>
>>> abraços
>>
>>>
>>
>> Obrigado pela resposta, Luiz.
>>
>> Voce (ou alguem da lista) poderia me indicar onde o probability entraria na
>> regra abaixo e com um valor exemplificando 30% pra um link e 70% pra o
>> outro?
>>
>> pass in log quick on $int_if route-to { ($ext_if1 $ext_gw1), ($ext_if2 \
>> $ext_gw2) } round-robin from $int_if:network to any flags S/SA keep state
>>
>> Obrigado
>>
>> --
>>
>> Mario Lobo
>>
>> http://www.mallavoodoo.com.br
>>
>> FreeBSD since 2.2.8 [not Pro-Audio.... YET!!] (99% winblows FREE)
>
>
>
> --
>   /\             Luiz Gustavo S. Costa
>  /  \            Programmer at BSD Perimeter
> /    \ /\/\/\    Visit the pfSense Project
> /      \    \ \   http://www.pfsense.org
> ---------------------------------------------------------------------
> BSD da serra carioca, Teresopolis (visite: http://miud.in/Inv)
> Contatos: luizgustavo em luizgustavo.pro.br / lgcosta em pfsense.org
> Blog: http://www.luizgustavo.pro.br
>



-- 
  /\             Luiz Gustavo S. Costa
 /  \            Programmer at BSD Perimeter
/    \ /\/\/\    Visit the pfSense Project
/      \    \ \   http://www.pfsense.org
---------------------------------------------------------------------
BSD da serra carioca, Teresopolis (visite: http://miud.in/Inv)
Contatos: luizgustavo em luizgustavo.pro.br / lgcosta em pfsense.org
Blog: http://www.luizgustavo.pro.br