Failover and load balancing using advanced NAT daemon

[Jon Simola]

On 1/25/06, Oleg Tarasov <subscriber at osk.com.ua> wrote:

> First three functions would be great to be implemented inside one
> daemon like standart natd. Packets should be diverted into it. This
> daemon can easily perform all of the tasks listed above as all of the
> packets are passed through it.
>
> Using it in a combination with policy-routing would be a powerful
> mechanism!

You may want to check out PF, the packet filter imported from OpenBSD.
I have it running on some large routers doing NAT out multiple
interfaces, load balancing and policy routing. Careful use of anchors
and some scripting (or ifstated which might be in ports) can move
traffic off failed links or respond to changing loads.

I've done a lot with both ipfw and PF now, and I'm finding PF to be
more flexible for my uses.

--
Jon Simola
Systems Administrator
ABC Communications