Bandwidth control with two internet connections

[MattStan]

Hello all,

Can someone help me figure out if Untangle can handle our environment. We are trying to configure bandwidth control to work with two internet connections that are not load balanced. This is our config.

Internet A 20mbs---\

Firewall ---- Untangle ---- Switch

Internet B 20mbs ---/

We have multiple sub nets and we configured out firewall to send each sub net out a specific internet connection. For example, all student and wireless traffic is routed out Internet A and all staff and servers are routed out Internet B.

We want to set up Bandwidth control to treat each group of sub nets as a unique 20mbs pipe and throttle connections appropriately. Is this possible? Please let me know if you need further clarification.

[jcoehoorn]

If you have bandwidth control, pay for the WAN balancer app also and throw away your old firewall. Untangle will take care of all of this for you in one device, and do it better job because it can be smarter about balancing the two connections and how that will interact with your packet shaping.

[MattStan]

Thanks for the reply. I like that option because I'd really like to load balance both lines. However, our current firewall configuration is two Cisco ASA 5508s in active / standby and I don't think giving up redundancy will go well with my boss.

[jcoehoorn]

Untangle is already a single point of failure in your diagram. Removing the cisco firewalls will make your network more resilient, not less, because all you're doing is removing the chance that both of the firewalls fail at the same time, or that the failover mechanism doesn't work as expected if the primary fails (this happens more than one would think).

But for what it's worth, this is a common complaint and so I would be surprised if the UT team doesn't have a hot standby mode feature in the works.

[sky-knight]

If I could figure out how to change Untangle's LAN IP address, the hot standby feature would be alive already.

I'm not syncing configurations, nor doing any licensing magic. It's just a separate box, with a separate configuration hanging out waiting for the primary to blow up so it can take over. I've got everything working, I just can't change that ()&**^ IP address from the command line.

[bigdessert]

If I could figure out how to change Untangle's LAN IP address, the hot standby feature would be alive already.

I'm not syncing configurations, nor doing any licensing magic. It's just a separate box, with a separate configuration hanging out waiting for the primary to blow up so it can take over. I've got everything working, I just can't change that ()&**^ IP address from the command line.

Have you tried changing it in /etc/network/interfaces

then do a /etc/init.d/networking restart?

It doesn't update the untangle interface, but it appears to change it.

[sky-knight]

Restarting networking does bad things to Untangle, moreover raw configuration of that file leads to some other nasty bugs.

So no I haven't tried it, because four years of working with Untangle has taught me to leave that thing alone!