Load Balancing Menggunakan PF

Judul asli : Load balance Menggunakan 2 Koneksi Internet yang berbeda Leased Line dan Adsl by : diem (  diem@lintascakrawala.net  ) dapat di...

Judul asli : Load balance
Menggunakan 2 Koneksi Internet yang berbeda Leased Line dan Adsl
by : diem ( diem@lintascakrawala.net )

dapat dilihat melalui gambar tersebut diatas

aya disini menggunakan pf untuk load balancedan saya tidak menjelaskan teknik kompile kernel, saya disini dan saya kira anda sudah mengerti cara mengaktikannya dan tidak perlu dijelaskan lagi, saya disini menggunakan 2 Koneksi internet satu Leased Line dan Adsl yaitu komputer dengan ip 192.168.0.1 s/d 192.168.0.7 menggunakan Leased Line dan Komputer dengan ip 192.168.0.8 s/d 192.168.0.14 menggunakan adsl 



langkap pertama tambahkan di rc.conf 

lintascakrawala# ee /etc/rc.conf 

defaultrouter=”gateway1” 

static_routes="link1 link2 link3 link4 link5" 

route_link1="58.0.0.0/8 gateway2" 

route_link2="60.0.0.0/8 gatewa2" 

route_link3="62.0.0.0/8 gateway2" 

route_link4="202.0.0.0/8 gatewa2" 

route_link5="203.0.0.0/8 gateway2" 

langkah kedua edit pf di pf.conf 

lintascakrawala#ee /etc/pf.conf 





########## Local Area Network ####################### 

lan1 = "{192.168.0.1,192.168.0.2,192.168.0.3,192.168.0.4,192.168.0.5,192.168.0.6,192.168.0.7}" 

lan2 = "{192.168.0.8,192.168.0.9,192.168.0.10,192.168.0.11,192.168.0.12,192.168.0.100,192.168.0.13,192.168.0.14}"

dns1 = "{x.x.x.x,x.x.x.x}"  <--- dnsnya Leased Line

dns2 = "{x.x.x.x,x.x.x.x}"  <--- dnsnya Adsl

ob_state = "flags S/SA keep state" 

int_if  = "rl1"    <--- Local Area Network

ext_if1 = "rl0"  <--- Internet 1

ext_if2 = "rl2"  <--- Internet 2

ext_gw1 = "x.x.x.x" <--- Gateway 1 

ext_gw2 = "x.x.x.x" <--- Gateway 2 



#  nat outgoing connections on internet 2 connections

nat on $ext_if1 proto {tcp,udp,icmp} from $lan1 to any -> ($ext_if1) 

nat on $ext_if2 proto {tcp,udp,icmp} from $lan2 to any -> ($ext_if2) 



#  pass all outgoing packets on internal interface

pass out on $int_if from any to $lan1 

pass out on $int_if from any to $lan2 



#  pass in quick any packets destined for the gateway itself

pass in quick on $int_if from $lan1 to $int_if 

pass in quick on $int_if from $lan2 to $int_if 



#  load balance outgoing tcp traffic from internal network.



pass in on $int_if route-to { ($ext_if1 $ext_gw1) } round-robin proto tcp from $lan1 to any flags S/SA modulate state 

pass in on $int_if route-to { ($ext_if2 $ext_gw2) } round-robin proto tcp from $lan2 to any flags S/SA modulate state 



#  load balance outgoing udp and icmp traffic from internal network

pass in on $int_if route-to { ($ext_if1 $ext_gw1) } round-robin  proto { udp, icmp } from $lan1 to any keep state

pass in on $int_if route-to { ($ext_if2 $ext_gw2) } round-robin  proto { udp, icmp } from $lan2 to any keep state



#  general "pass out" rules for external interfaces

pass out on $ext_if1 proto tcp from any to any flags S/SA modulate state 

pass out on $ext_if1 proto { udp, icmp } from any to any keep state 

pass out on $ext_if2 proto tcp from any to any flags S/SA modulate state 

pass out on $ext_if2 proto { udp, icmp } from any to any keep state 



#  route packets from any IPs on $ext_if1 to $ext_gw1 and the same for

#  $ext_if2 and $ext_gw2

pass out on $ext_if1 route-to ($ext_if2 $ext_gw2) from $ext_if2 to any 

pass out on $ext_if2 route-to ($ext_if1 $ext_gw1) from $ext_if1 to any 



###############Domain Name Server Leased Line####################### 

antispoof for $int_if 

pass quick on lo0 all 

pass out quick on $int_if proto tcp  from $lan1 to $dns1 port 53 $ob_state

pass out quick on $int_if proto udp from $lan1 to $dns1 port 53 keep state 



##############Domain Name Server Adsl################### 

pass out quick on $int_if proto tcp from $lan2 to $dns2 port 53 $ob_state 

pass out quick on $int_if proto udp from $lan2 to $dns2 port 53 keep state 



Tahap selanjut simpan pf.conf  

restart pfctcl 

lintascakrawala#pfctl -NORf /etc/pf.conf 



dan Tahap Terakhir coba jalankan pf 



lintascakrawala#pfctl -f /etc/pf.conf 





selesai sudah tahap pembuatan loadbalance script tersebut diatas jalan diserver saya terima kasih saya ucapkan kepada ogeb,dani78,setrum,apin dan rekan rekan di #indofreebsd dan tidak lupa buat Rei` selalu mendukung saya, dan yang tidak bisa saya sebutkan satu satu mohon dimaafkansebagai referensi  



https://www.indofreebsd.or.id

https://www.openbsd.org/faq/pf/pools.html#outgoing

COMMENTS

Name

Application Support,19,database server,1,Desktop/XWindow,1,DNS Server,2,Email Server,3,Firewall,1,FTP Server,2,General,2,IPFilter,1,Kernel,2,Networking,8,Proxy Server,4,Security,6,Tips and Trick,5,Web Server,2,
ltr
item
IndoFreeBSD: Load Balancing Menggunakan PF
Load Balancing Menggunakan PF
IndoFreeBSD
https://www.indofreebsd.or.id/2015/02/load-balancing-menggunakan-pf.html
https://www.indofreebsd.or.id/
http://www.indofreebsd.or.id/
http://www.indofreebsd.or.id/2015/02/load-balancing-menggunakan-pf.html
true
1901051463523757307
UTF-8
Loaded All Posts Not found any posts VIEW ALL Readmore Reply Cancel reply Delete By Home PAGES POSTS View All RECOMMENDED FOR YOU LABEL ARCHIVE SEARCH ALL POSTS Not found any post match with your request Back Home Sunday Monday Tuesday Wednesday Thursday Friday Saturday Sun Mon Tue Wed Thu Fri Sat January February March April May June July August September October November December Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec just now 1 minute ago $$1$$ minutes ago 1 hour ago $$1$$ hours ago Yesterday $$1$$ days ago $$1$$ weeks ago more than 5 weeks ago Followers Follow THIS PREMIUM CONTENT IS LOCKED STEP 1: Share to a social network STEP 2: Click the link on your social network Copy All Code Select All Code All codes were copied to your clipboard Can not copy the codes / texts, please press [CTRL]+[C] (or CMD+C with Mac) to copy Table of Content