Load Balance Issues

[AdamB]

I have an employee who uses www.claredi.com

We have 4 fios circuits being load balanced. After signing in, she is ok for a few minutes. Then she is prompted to login again. We have contacted claredi and they say its due to our external IP changing. Is it possible that her traffic is using a different circuit mid session? Is my only option to force her traffic out one circuit? I appreciate the input.

[jcoffin]

Many CDN web site rely on the same IP for the session. If your load balancer does not maintain the same outgoing IP for the entire session. Their session is lost. What are you using for load balancing?

[dmorris]

All traffic between two IPs is always put on the same WAN.
If they have multiple IPs involved in their system and they are using the client IP as a key, then yes you might have this issue.

You can add a route for their whole subnet if all their machines are on the same subnet.
Or you can add a source route for her machine to force it to use a single WAN

[AdamB]

Many CDN web site rely on the same IP for the session. If your load balancer does not maintain the same outgoing IP for the entire session. Their session is lost. What are you using for load balancing?

Untangle

[AdamB]

All traffic between two IPs is always put on the same WAN.
If they have multiple IPs involved in their system and they are using the client IP as a key, then yes you might have this issue.

You can add a route for their whole subnet if all their machines are on the same subnet.
Or you can add a source route for her machine to force it to use a single WAN

Looks like we have a number of employees who utilize this site. They are spread across a number of subnets. Looks like there is no way to do a destination type route in wan balancer?

[dmorris]

Looks like we have a number of employees who utilize this site. They are spread across a number of subnets. Looks like there is no way to do a destination type route in wan balancer?

You can in config->networking->advanced->routes.
just route their subnet -> gateway IP of the WAN you want to use.

[AdamB]

You can in config->networking->advanced->routes.
just route their subnet -> gateway IP of the WAN you want to use.

Not sure why I didn't think of that. Good call and appreciate the help!

[AdamB]

You can in config->networking->advanced->routes.
just route their subnet -> gateway IP of the WAN you want to use.

They have a total of 4 external IP's. When adding the route and using a netmask of 255.255.255.255 it doesn't work. It seems the only way I can get it to work is to open it up to 255.255.255.0 or a /24. Any reason why this shoudn't work?

[dmorris]

I'm not sure what "it doesn't work" means.
Did your server catch on fire?

/24 will work fine.

[jcoffin]

They have a total of 4 external IP's. When adding the route and using a netmask of 255.255.255.255 it doesn't work. It seems the only way I can get it to work is to open it up to 255.255.255.0 or a /24. Any reason why this shoudn't work?

255.255.255.255 is only one IP address.

255.255.255.252 or /30 is 4 (2 usable)

http://unixwiz.net/techtips/netmask-ref.html