-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Piltrafilla,
The standard linux load balancing suite can take care of this for you
(linux virtual server). I hate to say it, but you might also want to
google this. I used "linux 2 outbound connection" and came up with the
following links:
http://linux-ip.net/html/adv-multi-internet.html
http://www.samag.com/documents/s=1824/sam0201h/0201h.htm
and i'm sure there are more references.
dmz
Piltrafilla wrote:
Hello,
A customer of mine has a two linux-based PCs acting as firewalls for
perimeter protection. Those boxes are linked to two different routers
of two different ISPs with different public address ranges.
Internal address range is RFC1918-based and firewalls is the place
where NAT is done to public address range depending on which outbound
link is chosen (routing decision). Basically default route is placed
to first ISP and some particular websites are statically routed
through the second ISP.
It is not possible to perform any kind of dynamic routing with any of
those ISPs, is there any kind of daemon of script that could run on
the fw boxes so that I could ping or access some hosts or websites on
the Internet through the first ISP and in case they are not accessible
(any kind of network failure, not only link fail on the WAN side of
the ISP router but also some backbone link of ISP) then it could just
change the default route in the boxes to go through the second ISP.
NAT would be outbound-performed on interfaces to each ISP router.
Thanks a lot in advance,
-- piltrafilla
-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.0.2 (Build 2424)
iQA/AwUBQ8SOrJcwFRNrWbm9EQJzzgCgqKrGfaYo0A6fCst9FpLk2TZR6E4AoNFT
T2lRHNpgEntKIpt7M8Nc7e7A
=Sg+Y
-----END PGP SIGNATURE-----
