Results 1 to 9 of 9

Thread: Untangle 10.0

  1. #1
    Master Untangler
    Join Date
    Mar 2011
    Location
    Auburn, NY
    Posts
    437

    Default Untangle 10.0

    Setting up my new Untangle 10.0 install. Everything went very smooth until I started setting up WAN balancer.

    - Total of 5 circuits.
    - All of them are showing as up in WAN failover.
    - I can ping the default gateway from each interface on the command line.

    It doesn't what I change the weight to within WAN balancer it doesn't seem to effect what circuit I go out on. Is there something which has changed in WAN balancer that I am possibly missing? It is setup identical to my current setup which has been working great. Appreciate any help or input.

  2. #2
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Lake Tahoe
    Posts
    9,687

    Default

    Sessions are sticky on WAN Balancer. If you are going from one PC to the same external site, the same WAN will be used.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  3. #3
    Master Untangler
    Join Date
    Mar 2011
    Location
    Auburn, NY
    Posts
    437

    Default

    Quote Originally Posted by jcoffin View Post
    Sessions are sticky on WAN Balancer. If you are going from one PC to the same external site, the same WAN will be used.
    So if I change the weight to force the traffic out another WAN it still stay's sticky to the original? I have all my weight on one specific WAN, but my traffic is still going out the other. Does the WAN have to physically go down? This is a bummer as its very useful in my situation to have this control even if the WAN is physically still up.

  4. #4
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,498

    Default

    Quote Originally Posted by jcoffin View Post
    Sessions are sticky on WAN Balancer. If you are going from one PC to the same external site, the same WAN will be used.
    I would like to point out this is by design, because there was a time when sessions weren't sticky enough and SSL enabled web services would break down. Now all communications from a given IP will go out a specific WAN. The next internal address goes out another, and so on. The individual machine won't change WANs until the sessions reset, and Balancer feels it needs to move them, or WAN Failover says the interface is offline.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  5. #5
    Master Untangler
    Join Date
    Mar 2011
    Location
    Auburn, NY
    Posts
    437

    Default

    Quote Originally Posted by sky-knight View Post
    I would like to point out this is by design, because there was a time when sessions weren't sticky enough and SSL enabled web services would break down. Now all communications from a given IP will go out a specific WAN. The next internal address goes out another, and so on. The individual machine won't change WANs until the sessions reset, and Balancer feels it needs to move them, or WAN Failover says the interface is offline.
    Good info! Just a bummer that I can no longer control this. There is a number of situations this comes in handy!

  6. #6
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Lake Tahoe
    Posts
    9,687

    Default

    Using WAN Balancer Route Rules, a LAN device can be forced out a specific WAN.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  7. #7
    Master Untangler
    Join Date
    Mar 2011
    Location
    Auburn, NY
    Posts
    437

    Default

    Quote Originally Posted by jcoffin View Post
    Using WAN Balancer Route Rules, a LAN device can be forced out a specific WAN.
    Exactly the idea I was looking for! Appreciate it.

  8. #8
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,498

    Default

    The tools are there... with Untangle, they're almost always there.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  9. #9
    Untangle Junkie dmorris's Avatar
    Join Date
    Nov 2006
    Location
    San Carlos, CA
    Posts
    17,486

    Default

    Saving settings will reset the route cache.
    "ip route flush cache" also will.

    However, it won't reset existing sessions.
    If you have existing they are already NATd to a specific WAN and will continue to go out that WAN.
    It can't re-NAT to a different address mid-session, that would effectively just reset them.
    Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2