VPN Bonding - Revision history

Drsox: Protected "VPN Bonding" ([edit=autoconfirmed] (indefinite) [move=autoconfirmed] (indefinite))

Drsox — Mon, 16 Aug 2010 17:42:06 GMT

Protected "VPN Bonding" ([edit=autoconfirmed] (indefinite) [move=autoconfirmed] (indefinite))

2001:470:1F09:8E2:549C:2B72:91EE:6FC4: Undo revision 3353 by 123.236.244.57 (Talk)

2001:470:1F09:8E2:549C:2B72:91EE:6FC4 — Mon, 16 Aug 2010 17:41:53 GMT

Undo revision 3353 by 123.236.244.57 (Talk)

123.236.244.57: PzaLce bdybxrbbywmn, [url=http://hasojjasxkiz.com/]hasojjasxkiz[/url], [link=http://xqusrvcweotw.com/]xqusrvcweotw[/link], http://wbhptkohhsys.com/

123.236.244.57 — Mon, 16 Aug 2010 14:06:44 GMT

PzaLce <a href="http://bdybxrbbywmn.com/">bdybxrbbywmn</a>, [url=http://hasojjasxkiz.com/]hasojjasxkiz[/url], [link=http://xqusrvcweotw.com/]xqusrvcweotw[/link], http://wbhptkohhsys.com/

Drsox at 22:55, 19 November 2009

Drsox — Thu, 19 Nov 2009 22:55:59 GMT

Drsox: /* Splitting the traffic down two Be* lines */

Drsox — Thu, 13 Aug 2009 20:25:20 GMT

‎Splitting the traffic down two Be* lines

Drsox at 08:47, 12 May 2009

Drsox — Tue, 12 May 2009 08:47:58 GMT

Drsox: /* Setup of the Server and prerequisites */

Drsox — Mon, 11 May 2009 19:35:17 GMT

‎Setup of the Server and prerequisites

Drsox: /* Setup of the Server and prerequisites */

Drsox — Mon, 11 May 2009 19:32:56 GMT

‎Setup of the Server and prerequisites

Drsox: /* Setup of the Server and prerequisites */

Drsox — Mon, 11 May 2009 19:32:49 GMT

‎Setup of the Server and prerequisites

Drsox: /* Setup of the Server and prerequisites */

Drsox — Mon, 11 May 2009 19:32:22 GMT

‎Setup of the Server and prerequisites

@@ Line 14: / Line 14: @@
 My setup is based on ZeroShell.
-PzaLce  <a href="http://bdybxrbbywmn.com/">bdybxrbbywmn</a>, [url=http://hasojjasxkiz.com/]hasojjasxkiz[/url], [link=http://xqusrvcweotw.com/]xqusrvcweotw[/link], http://wbhptkohhsys.com/
+==Setup of the Server and prerequisites==
 ==Setup of the Client (server in your house)==

@@ Line 14: / Line 14: @@
 My setup is based on ZeroShell.
-==Setup of the Server and prerequisites==
+PzaLce  <a href="http://bdybxrbbywmn.com/">bdybxrbbywmn</a>, [url=http://hasojjasxkiz.com/]hasojjasxkiz[/url], [link=http://xqusrvcweotw.com/]xqusrvcweotw[/link], http://wbhptkohhsys.com/
-−
-First off, get two ZeroShells running and passing traffic via something which can direct specific destination port traffic down two different lines.. for example pfSense. (Or use two IP's at your VPN Server end and direct each VPN Stream down the correct WAN in the VPN client options screen, Note that UDP mode does not seem to work or split the traffic! If using UDP you must have pfsense or another system splitting the traffic down the two lines)
-−
-Add two VPN's on your server without IP's assigned to them [see the network list screenshot further down] however you may want to enter the different WAN IP's for each VPN - although I do not believe this acts as an "allow only this IP" setting.. but I use it as a note on which IP is for which VPN:
-−
-[[Image:Farend3.png|500px]]
-−
-[[Image:Farend4.png|500px]]
-−
-Make sure you BOND Them! So go to the Setup--> Network section and click Create New Bond and select the two VPN's.
-−
-At this stage you may want to add an IP address to the BOND or do as I did...
-I then BRIDGED my ones with the servers ethernet so I could have a public IP at my house via the VPN.. however you could skip this step and do double-NAT or bridge at the "house" so your server is an extension to your lan:
-−
-[[Image:Farend1.png|500px]]
-−
-In my case (as the server does not do the NATTING and my VPN has a public IP I do not need NAT on:
-−
-[[Image:Farend2.png|500px]]
 ==Setup of the Client (server in your house)==

@@ Line 1: / Line 1: @@
-Do you have two Be* (or other ISP!) lines and wish to merge them so they appear like just one?
+Do you have two BE (or other ISP!) lines and wish to merge them so they appear like just one?
 Does your server in <Insert data center name here> have the ability to have a spare (or two if you don't want double-nat) ip and can it run vmware server?
-If so that's the server side happy.
+If so: that is the server side happy.
 Secondly do you have a machine or ALIX box in your house that can run another vmware virtual machine to do the vpn bonding..
 You then (may) need a "load balancer" (another machine running pfsense or zero shell) to split the two vpn streams down each line [so that machine needs two NICS].
-There are two things I could have done to avoid the need for a pfSense box.. used an internal IP for the VPN, or used two IP's for the VPN Server.. see my notes at the end about subnets and my own requirements.
+There are two things I could have done to avoid the need for a pfSense box.. used an internal IP for the VPN's public IP, or used two IP's for the VPN Server.. see my notes at the end about subnets and my own requirements.
 Thats the most challenging part - the rest is configuration which is easy now I can tell you what I did ;)
@@ Line 16: / Line 16: @@
 ==Setup of the Server and prerequisites==
-First off, get two ZeroShells running and passing traffic via something which can direct specific destination port traffic down two different lines.. for example pfSense.
+First off, get two ZeroShells running and passing traffic via something which can direct specific destination port traffic down two different lines.. for example pfSense. (Or use two IP's at your VPN Server end and direct each VPN Stream down the correct WAN in the VPN client options screen, Note that UDP mode does not seem to work or split the traffic! If using UDP you must have pfsense or another system splitting the traffic down the two lines)
 Add two VPN's on your server without IP's assigned to them [see the network list screenshot further down] however you may want to enter the different WAN IP's for each VPN - although I do not believe this acts as an "allow only this IP" setting.. but I use it as a note on which IP is for which VPN:
@@ Line 67: / Line 67: @@
 [[Image:Nearend3.png|500px]]
-==Splitting the traffic down two Be* lines==
+==Splitting the traffic down two BE lines==
-EDIT: I have since moved pfsense to an ALIX box and purchased a second IP for my ZeroShell at my datacentre.. so I now only have one box (My router ZeroShell) at home! However it appears that for some reason it will only send the traffic down different gateways when the VPN type is set to TCP. When set to UDP it appears to send both streams down one WAN! Keep an eye out for that problem!
+EDIT: I have since removed pfsense and purchased a second IP for my ZeroShell Server at my datacentre.. so I now only have one box (My router ZeroShell) at home! However it appears that for some reason it will only send the traffic down different gateways when the VPN type is set to TCP. When set to UDP it appears to send both streams down one WAN! Keep an eye out for that problem!
-Due to the way I wanted my VPN to have a public IP, and the fact that the IP the ZeroShell box would get is within the SAME subnet as the vpn server it needed to connect to.. I couldn't tell the ZeroShell how to connect, without a static route.
+PREVIOUSLY: Due to the way I wanted my VPN to have a public IP, and the fact that the IP the ZeroShell box would get is within the SAME subnet as the vpn server it needed to connect to.. I couldn't tell the ZeroShell how to connect, without a static route.
 A static route is fixed to one WAN.. so I then lost the whole point.. Using both my lines!.
 I did not want to use TWO IP's for the VPN server with two static routes, generally because I have a limited number of IP's I can use at my datacenter.

@@ Line 68: / Line 68: @@
 ==Splitting the traffic down two Be* lines==
 Due to the way I wanted my VPN to have a public IP, and the fact that the IP the ZeroShell box would get is within the SAME subnet as the vpn server it needed to connect to.. I couldn't tell the ZeroShell how to connect, without a static route.
 A static route is fixed to one WAN.. so I then lost the whole point.. Using both my lines!.

← Older revision		Revision as of 08:47, 12 May 2009
Line 1:		Line 1:
		+	Do you have two Be* (or other ISP!) lines and wish to merge them so they appear like just one?
		+
	Does your server in <Insert data center name here> have the ability to have a spare (or two if you don't want double-nat) ip and can it run vmware server?		Does your server in <Insert data center name here> have the ability to have a spare (or two if you don't want double-nat) ip and can it run vmware server?

@@ Line 18: / Line 18: @@
 Add two VPN's on your server without IP's assigned to them [see the network list screenshot further down] but obviously with the IP of the server you want to connect to:
-[[Image:Farend3.png|VPN1|500px]]
+[[Image:Farend3.png|500px]]
-[[Image:Farend4.png|VPN2|500px]]
+[[Image:Farend4.png|500px]]
 Make sure you BOND Them! So go to the Setup--> Network section and click Create New Bond and select the two VPN's.

@@ Line 18: / Line 18: @@
 Add two VPN's on your server without IP's assigned to them [see the network list screenshot further down] but obviously with the IP of the server you want to connect to:
-[[Image:Farend3.png|500px||VPN1]]
+[[Image:Farend3.png|500px|||VPN1]]
-[[Image:Farend4.png|500px||VPN2]]
+[[Image:Farend4.png|500px|||VPN2]]
 Make sure you BOND Them! So go to the Setup--> Network section and click Create New Bond and select the two VPN's.