+ Responder ao Tópico



  1. #1

    Padrão Balanceamento de rede com cache link dedicado 2mb + adsl

    Olá pessoal do forum, estou com um problemão para resolver.

    Vou tentar explicar o que pretendo fazer, hoje tenho um link dedicado de 2MB utilizo cache full, + ou - 250 Clientes, o que garante o bom funcionamento é o cache.
    Preciso adicionar algumas adsls a alguns grupos de clientes para aliviar minha rede até que venha a ampliação de link, como sempre demorada.
    Em "ip address" eu tenho várias faixas de ip, a cada 10 ou 15 clientes eu utilizo uma faixa diferente de ips, desta forma pretendo fazer balanceamento por grupo, fica fácil mudar um grupo de cliente para um link x. vou postar a baixo todas as configurações do meu servidor:

    ether1 link
    ether2 rede

    [admin@MikroTik] ip address> print
    Flags: X - disabled, I - invalid, D - dynamic
    # ADDRESS NETWORK BROADCAST INTERFACE
    0 200.203.128.112/24 200.203.128.0 200.203.128.255 ether2
    1 189.30.30.228/23 189.30.30.0 189.30.30.255 ether1
    2 200.203.129.112/24 200.203.129.0 200.203.129.255 ether2
    3 189.30.30.229/23 189.30.30.0 189.30.30.255 ether1
    4 200.203.127.112/24 200.203.127.0 200.203.127.255 ether2
    5 200.203.130.112/24 200.203.130.0 200.203.130.255 ether2
    6 200.203.131.112/24 200.203.131.0 200.203.131.255 ether2
    7 200.203.132.112/24 200.203.132.0 200.203.132.255 ether2
    8 200.203.136.112/24 200.203.136.0 200.203.136.255 ether2
    9 200.203.133.112/24 200.203.133.0 200.203.133.255 ether2
    10 200.203.134.112/24 200.203.134.0 200.203.134.255 ether2
    11 200.203.135.112/24 200.203.135.0 200.203.135.255 ether2
    12 200.203.137.112/24 200.203.137.0 200.203.137.255 ether2
    13 200.203.138.112/24 200.203.138.0 200.203.138.255 ether2
    14 189.30.30.227/23 189.30.30.0 189.30.30.255 ether1
    15 200.203.139.112/24 200.203.139.0 200.203.139.255 ether2
    16 200.203.140.112/24 200.203.140.0 200.203.140.255 ether2
    17 192.168.254.200/24 192.168.254.0 192.168.255.255 ether1
    [admin@MikroTik] ip address>



    REPAREM QUE UTILIZO VARIAS FAIXAS DE IP DE SAIDA.
    [admin@MikroTik] ip route> print
    Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf
    # DST-ADDRESS PREF-SRC G GATEWAY DISTANCE INTERFACE
    0 ADC 189.30.30.0/23 189.30.30.227 ether1
    1 ADC 192.168.254.0/24 192.168.254.200 ether1
    2 ADC 200.203.127.0/24 200.203.127.112 ether2
    3 ADC 200.203.128.0/24 200.203.128.112 ether2
    4 ADC 200.203.129.0/24 200.203.129.112 ether2
    5 ADC 200.203.130.0/24 200.203.130.112 ether2
    6 ADC 200.203.131.0/24 200.203.131.112 ether2
    7 ADC 200.203.132.0/24 200.203.132.112 ether2
    8 ADC 200.203.133.0/24 200.203.133.112 ether2
    9 ADC 200.203.134.0/24 200.203.134.112 ether2
    10 ADC 200.203.135.0/24 200.203.135.112 ether2
    11 ADC 200.203.136.0/24 200.203.136.112 ether2
    12 ADC 200.203.137.0/24 200.203.137.112 ether2
    13 ADC 200.203.138.0/24 200.203.138.112 ether2
    14 ADC 200.203.139.0/24 200.203.139.112 ether2
    15 ADC 200.203.140.0/24 200.203.140.112 ether2
    16 A S 0.0.0.0/0 r 189.30.30.225 ether1
    17 A S ;;; ADSL
    0.0.0.0/0 r 192.168.254.254 ether1
    18 A S 0.0.0.0/0 r 189.30.30.225 ether1
    19 A S 0.0.0.0/0 r 189.30.30.225 ether1
    20 A S ;;; ADSL
    0.0.0.0/0 r 192.168.254.254 ether1
    21 A S 0.0.0.0/0 r 189.30.30.225 ether1
    22 A S ;;; ADSL
    0.0.0.0/0 r 192.168.254.254 ether1
    23 A S 0.0.0.0/0 r 189.30.30.225 ether1
    24 A S 0.0.0.0/0 r 189.30.30.225 ether1
    25 A S 0.0.0.0/0 r 189.30.30.225 ether1
    26 A S 0.0.0.0/0 r 189.30.30.225 ether1
    27 X S 0.0.0.0/0 r 192.168.254.254 ether1
    28 A S 0.0.0.0/0 r 189.30.30.225 ether1
    29 A S 0.0.0.0/0 r 189.30.30.225 ether1
    30 A S 0.0.0.0/0 r 189.30.30.225 ether1
    31 A S ;;; ADSL
    0.0.0.0/0 r 192.168.254.254 ether1
    [admin@MikroTik] ip route>




    AQUI SEGUE AS REGRAS DO MEU CAHCE FULL, CONTROLE P2P E OS GRUPOS PARA AS VARIAS FAIXAS DE IP QUE TENHO.
    Flags: X - disabled, I - invalid, D - dynamic
    0 ;;; PROXI FULL
    chain=output protocol=tcp src-port=3128 action=mark-connection new-connection-mark=proxifull passthrough=yes
    1 chain=output connection-mark=proxifull action=mark-packet new-packet-mark=proxifull passthrough=yes
    2 chain=output connection-mark=proxifull action=return
    3 ;;; CONTROLE P2P
    chain=prerouting p2p=all-p2p action=mark-connection new-connection-mark=p2p_conn passthrough=yes
    4 chain=prerouting connection-mark=p2p_conn action=mark-packet new-packet-mark=p2p passthrough=yes
    5 ;;; MARCA PACOTES VOIP
    chain=forward connection-mark=voip_conn action=mark-packet new-packet-mark=voip passthrough=yes
    6 chain=postrouting connection-mark=voip_conn action=change-tos new-tos=min-delay
    7 chain=forward dst-address=201.33.209.6 action=mark-connection new-connection-mark=voip_conn passthrough=yes
    8 ;;; GRUPOA
    chain=prerouting src-address=200.203.140.0/24 action=mark-routing new-routing-mark=GRUPOA passthrough=no
    9 ;;; GRUPOB
    chain=prerouting src-address=200.203.127.0/24 action=mark-routing new-routing-mark=GRUPOB passthrough=no
    10 ;;; GRUPOC
    chain=prerouting src-address=200.203.128.0/24 action=mark-routing new-routing-mark=GRUPOC passthrough=no
    11 ;;; GRUPOD
    chain=prerouting src-address=200.203.129.0/24 action=mark-routing new-routing-mark=GRUPOD passthrough=no
    12 ;;; GRUPOE
    chain=prerouting src-address=200.203.130.0/24 action=mark-routing new-routing-mark=GRUPOE passthrough=no
    13 ;;; GRUPOF
    chain=prerouting src-address=200.203.131.0/24 action=mark-routing new-routing-mark=GRUPOF passthrough=no
    14 ;;; GRUPOG
    chain=prerouting src-address=200.203.132.0/24 action=mark-routing new-routing-mark=GRUPOG passthrough=no
    15 ;;; GRUPOH
    chain=prerouting src-address=200.203.133.0/24 action=mark-routing new-routing-mark=GRUPOH passthrough=no
    16 ;;; GRUPOI
    chain=prerouting src-address=200.203.134.0/24 action=mark-routing new-routing-mark=GRUPOI passthrough=no
    17 ;;; GRUPOJ
    chain=prerouting src-address=200.203.135.0/24 action=mark-routing new-routing-mark=GRUPOJ passthrough=no
    18 ;;; GRUPOL
    chain=prerouting src-address=200.203.136.0/24 action=mark-routing new-routing-mark=GRUPOL passthrough=no
    19 ;;; GRUPOM
    chain=prerouting src-address=200.203.137.0/24 action=mark-routing new-routing-mark=GRUPOM passthrough=no
    20 ;;; GRUPON
    chain=prerouting src-address=200.203.138.0/24 action=mark-routing new-routing-mark=GRUPON passthrough=no

    21 ;;; GRUPOO
    chain=prerouting src-address=200.203.139.0/24 action=mark-routing new-routing-mark=GRUPOO passthrough=no
    -- [Q quit|D dump|up]




    AQUI SEGUE AS REGRAS DO NAT:
    REPAREM QUE AQUI EU FIZ UM MASQUERADE PARA CADA GURPO.
    SEGUE TAMBÉM A REGRA DO REDIRECIONAMENTO DO PROXI.

    [admin@MikroTik] ip firewall> nat
    [admin@MikroTik] ip firewall nat> print
    Flags: X - disabled, I - invalid, D - dynamic
    0 X chain=srcnat out-interface=ether1 action=masquerade
    1 chain=dstnat in-interface=ether2 protocol=tcp dst-port=80 action=redirect to-ports=3128
    2 ;;; GUNTHER
    chain=dstnat dst-address=189.30.30.X protocol=tcp dst-port=3389 action=dst-nat to-addresses=200.203.128.28 to-ports=3389
    3 X ;;; GUNTHER
    chain=dstnat dst-address=189.30.30.X protocol=tcp dst-port=8291 action=dst-nat to-addresses=200.203.128.252 to-ports=8291
    4 ;;; MAURICIO
    chain=dstnat dst-address=189.30.30.X protocol=tcp dst-port=3389 action=dst-nat to-addresses=200.203.128.200 to-ports=3389
    5 ;;; MAURICIO
    chain=dstnat dst-address=189.30.30.X protocol=tcp dst-port=5900 action=dst-nat to-addresses=200.203.136.28 to-ports=5900
    6 ;;; NAT BALANCEMANENTO GRUPO A
    chain=srcnat out-interface=ether1 src-address=200.203.140.0/24 action=masquerade
    7 ;;; NAT BALANCEMANENTO GRUPO B
    chain=srcnat out-interface=ether1 src-address=200.203.127.0/24 action=masquerade
    8 ;;; NAT BALANCEMANENTO GRUPO C
    chain=srcnat out-interface=ether1 src-address=200.203.128.0/24 action=masquerade
    9 ;;; NAT BALANCEMANENTO GRUPO D
    chain=srcnat out-interface=ether1 src-address=200.203.129.0/24 action=masquerade
    10 ;;; NAT BALANCEMANENTO GRUPO E
    chain=srcnat out-interface=ether1 src-address=200.203.130.0/24 action=masquerade
    11 ;;; NAT BALANCEMANENTO GRUPO F
    chain=srcnat out-interface=ether1 src-address=200.203.131.0/24 action=masquerade
    12 ;;; NAT BALANCEMANENTO GRUPO G
    chain=srcnat out-interface=ether1 src-address=200.203.132.0/24 action=masquerade
    13 ;;; NAT BALANCEMANENTO GRUPO H
    chain=srcnat out-interface=ether1 src-address=200.203.133.0/24 action=masquerade
    14 ;;; NAT BALANCEMANENTO GRUPO I
    chain=srcnat out-interface=ether1 src-address=200.203.134.0/24 action=masquerade
    15 ;;; NAT BALANCEMANENTO GRUPO J
    chain=srcnat out-interface=ether1 src-address=200.203.135.0/24 action=masquerade
    16 ;;; NAT BALANCEMANENTO GRUPO L
    chain=srcnat out-interface=ether1 src-address=200.203.136.0/24 action=masquerade
    17 ;;; NAT BALANCEMANENTO GRUPO M
    chain=srcnat out-interface=ether1 src-address=200.203.137.0/24 action=masquerade
    18 ;;; NAT BALANCEMANENTO GRUPO N
    chain=srcnat out-interface=ether1 src-address=200.203.138.0/24 action=masquerade
    19 ;;; NAT BALANCEMANENTO GRUPO O

    Bom, agora que já temos todas as regras, vou explicar melhor o problema, quando eu executo o balancemento ele só funciona quando eu desabilito o proxi, existe alguma forma de eu habilitar o balanceamento juntamente com o cache?


    Att. Günther

  2. #2

    Padrão

    Citação Postado originalmente por gunthermb Ver Post
    Olá pessoal do forum, estou com um problemão para resolver.

    Vou tentar explicar o que pretendo fazer, hoje tenho um link dedicado de 2MB utilizo cache full, + ou - 250 Clientes, o que garante o bom funcionamento é o cache.
    Preciso adicionar algumas adsls a alguns grupos de clientes para aliviar minha rede até que venha a ampliação de link, como sempre demorada.
    Em "ip address" eu tenho várias faixas de ip, a cada 10 ou 15 clientes eu utilizo uma faixa diferente de ips, desta forma pretendo fazer balanceamento por grupo, fica fácil mudar um grupo de cliente para um link x. vou postar a baixo todas as configurações do meu servidor:

    ether1 link
    ether2 rede

    [admin@MikroTik] ip address> print
    Flags: X - disabled, I - invalid, D - dynamic
    # ADDRESS NETWORK BROADCAST INTERFACE
    0 200.203.128.112/24 200.203.128.0 200.203.128.255 ether2
    1 189.30.30.228/23 189.30.30.0 189.30.30.255 ether1
    2 200.203.129.112/24 200.203.129.0 200.203.129.255 ether2
    3 189.30.30.229/23 189.30.30.0 189.30.30.255 ether1
    4 200.203.127.112/24 200.203.127.0 200.203.127.255 ether2
    5 200.203.130.112/24 200.203.130.0 200.203.130.255 ether2
    6 200.203.131.112/24 200.203.131.0 200.203.131.255 ether2
    7 200.203.132.112/24 200.203.132.0 200.203.132.255 ether2
    8 200.203.136.112/24 200.203.136.0 200.203.136.255 ether2
    9 200.203.133.112/24 200.203.133.0 200.203.133.255 ether2
    10 200.203.134.112/24 200.203.134.0 200.203.134.255 ether2
    11 200.203.135.112/24 200.203.135.0 200.203.135.255 ether2
    12 200.203.137.112/24 200.203.137.0 200.203.137.255 ether2
    13 200.203.138.112/24 200.203.138.0 200.203.138.255 ether2
    14 189.30.30.227/23 189.30.30.0 189.30.30.255 ether1
    15 200.203.139.112/24 200.203.139.0 200.203.139.255 ether2
    16 200.203.140.112/24 200.203.140.0 200.203.140.255 ether2
    17 192.168.254.200/24 192.168.254.0 192.168.255.255 ether1
    [admin@MikroTik] ip address>



    REPAREM QUE UTILIZO VARIAS FAIXAS DE IP DE SAIDA.
    [admin@MikroTik] ip route> print
    Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf
    # DST-ADDRESS PREF-SRC G GATEWAY DISTANCE INTERFACE
    0 ADC 189.30.30.0/23 189.30.30.227 ether1
    1 ADC 192.168.254.0/24 192.168.254.200 ether1
    2 ADC 200.203.127.0/24 200.203.127.112 ether2
    3 ADC 200.203.128.0/24 200.203.128.112 ether2
    4 ADC 200.203.129.0/24 200.203.129.112 ether2
    5 ADC 200.203.130.0/24 200.203.130.112 ether2
    6 ADC 200.203.131.0/24 200.203.131.112 ether2
    7 ADC 200.203.132.0/24 200.203.132.112 ether2
    8 ADC 200.203.133.0/24 200.203.133.112 ether2
    9 ADC 200.203.134.0/24 200.203.134.112 ether2
    10 ADC 200.203.135.0/24 200.203.135.112 ether2
    11 ADC 200.203.136.0/24 200.203.136.112 ether2
    12 ADC 200.203.137.0/24 200.203.137.112 ether2
    13 ADC 200.203.138.0/24 200.203.138.112 ether2
    14 ADC 200.203.139.0/24 200.203.139.112 ether2
    15 ADC 200.203.140.0/24 200.203.140.112 ether2
    16 A S 0.0.0.0/0 r 189.30.30.225 ether1
    17 A S ;;; ADSL
    0.0.0.0/0 r 192.168.254.254 ether1
    18 A S 0.0.0.0/0 r 189.30.30.225 ether1
    19 A S 0.0.0.0/0 r 189.30.30.225 ether1
    20 A S ;;; ADSL
    0.0.0.0/0 r 192.168.254.254 ether1
    21 A S 0.0.0.0/0 r 189.30.30.225 ether1
    22 A S ;;; ADSL
    0.0.0.0/0 r 192.168.254.254 ether1
    23 A S 0.0.0.0/0 r 189.30.30.225 ether1
    24 A S 0.0.0.0/0 r 189.30.30.225 ether1
    25 A S 0.0.0.0/0 r 189.30.30.225 ether1
    26 A S 0.0.0.0/0 r 189.30.30.225 ether1
    27 X S 0.0.0.0/0 r 192.168.254.254 ether1
    28 A S 0.0.0.0/0 r 189.30.30.225 ether1
    29 A S 0.0.0.0/0 r 189.30.30.225 ether1
    30 A S 0.0.0.0/0 r 189.30.30.225 ether1
    31 A S ;;; ADSL
    0.0.0.0/0 r 192.168.254.254 ether1
    [admin@MikroTik] ip route>




    AQUI SEGUE AS REGRAS DO MEU CAHCE FULL, CONTROLE P2P E OS GRUPOS PARA AS VARIAS FAIXAS DE IP QUE TENHO.
    Flags: X - disabled, I - invalid, D - dynamic
    0 ;;; PROXI FULL
    chain=output protocol=tcp src-port=3128 action=mark-connection new-connection-mark=proxifull passthrough=yes
    1 chain=output connection-mark=proxifull action=mark-packet new-packet-mark=proxifull passthrough=yes
    2 chain=output connection-mark=proxifull action=return
    3 ;;; CONTROLE P2P
    chain=prerouting p2p=all-p2p action=mark-connection new-connection-mark=p2p_conn passthrough=yes
    4 chain=prerouting connection-mark=p2p_conn action=mark-packet new-packet-mark=p2p passthrough=yes
    5 ;;; MARCA PACOTES VOIP
    chain=forward connection-mark=voip_conn action=mark-packet new-packet-mark=voip passthrough=yes
    6 chain=postrouting connection-mark=voip_conn action=change-tos new-tos=min-delay
    7 chain=forward dst-address=201.33.209.6 action=mark-connection new-connection-mark=voip_conn passthrough=yes
    8 ;;; GRUPOA
    chain=prerouting src-address=200.203.140.0/24 action=mark-routing new-routing-mark=GRUPOA passthrough=no
    9 ;;; GRUPOB
    chain=prerouting src-address=200.203.127.0/24 action=mark-routing new-routing-mark=GRUPOB passthrough=no
    10 ;;; GRUPOC
    chain=prerouting src-address=200.203.128.0/24 action=mark-routing new-routing-mark=GRUPOC passthrough=no
    11 ;;; GRUPOD
    chain=prerouting src-address=200.203.129.0/24 action=mark-routing new-routing-mark=GRUPOD passthrough=no
    12 ;;; GRUPOE
    chain=prerouting src-address=200.203.130.0/24 action=mark-routing new-routing-mark=GRUPOE passthrough=no
    13 ;;; GRUPOF
    chain=prerouting src-address=200.203.131.0/24 action=mark-routing new-routing-mark=GRUPOF passthrough=no
    14 ;;; GRUPOG
    chain=prerouting src-address=200.203.132.0/24 action=mark-routing new-routing-mark=GRUPOG passthrough=no
    15 ;;; GRUPOH
    chain=prerouting src-address=200.203.133.0/24 action=mark-routing new-routing-mark=GRUPOH passthrough=no
    16 ;;; GRUPOI
    chain=prerouting src-address=200.203.134.0/24 action=mark-routing new-routing-mark=GRUPOI passthrough=no
    17 ;;; GRUPOJ
    chain=prerouting src-address=200.203.135.0/24 action=mark-routing new-routing-mark=GRUPOJ passthrough=no
    18 ;;; GRUPOL
    chain=prerouting src-address=200.203.136.0/24 action=mark-routing new-routing-mark=GRUPOL passthrough=no
    19 ;;; GRUPOM
    chain=prerouting src-address=200.203.137.0/24 action=mark-routing new-routing-mark=GRUPOM passthrough=no
    20 ;;; GRUPON
    chain=prerouting src-address=200.203.138.0/24 action=mark-routing new-routing-mark=GRUPON passthrough=no

    21 ;;; GRUPOO
    chain=prerouting src-address=200.203.139.0/24 action=mark-routing new-routing-mark=GRUPOO passthrough=no
    -- [Q quit|D dump|up]




    AQUI SEGUE AS REGRAS DO NAT:
    REPAREM QUE AQUI EU FIZ UM MASQUERADE PARA CADA GURPO.
    SEGUE TAMBÉM A REGRA DO REDIRECIONAMENTO DO PROXI.

    [admin@MikroTik] ip firewall> nat
    [admin@MikroTik] ip firewall nat> print
    Flags: X - disabled, I - invalid, D - dynamic
    0 X chain=srcnat out-interface=ether1 action=masquerade
    1 chain=dstnat in-interface=ether2 protocol=tcp dst-port=80 action=redirect to-ports=3128
    2 ;;; GUNTHER
    chain=dstnat dst-address=189.30.30.X protocol=tcp dst-port=3389 action=dst-nat to-addresses=200.203.128.28 to-ports=3389
    3 X ;;; GUNTHER
    chain=dstnat dst-address=189.30.30.X protocol=tcp dst-port=8291 action=dst-nat to-addresses=200.203.128.252 to-ports=8291
    4 ;;; MAURICIO
    chain=dstnat dst-address=189.30.30.X protocol=tcp dst-port=3389 action=dst-nat to-addresses=200.203.128.200 to-ports=3389
    5 ;;; MAURICIO
    chain=dstnat dst-address=189.30.30.X protocol=tcp dst-port=5900 action=dst-nat to-addresses=200.203.136.28 to-ports=5900
    6 ;;; NAT BALANCEMANENTO GRUPO A
    chain=srcnat out-interface=ether1 src-address=200.203.140.0/24 action=masquerade
    7 ;;; NAT BALANCEMANENTO GRUPO B
    chain=srcnat out-interface=ether1 src-address=200.203.127.0/24 action=masquerade
    8 ;;; NAT BALANCEMANENTO GRUPO C
    chain=srcnat out-interface=ether1 src-address=200.203.128.0/24 action=masquerade
    9 ;;; NAT BALANCEMANENTO GRUPO D
    chain=srcnat out-interface=ether1 src-address=200.203.129.0/24 action=masquerade
    10 ;;; NAT BALANCEMANENTO GRUPO E
    chain=srcnat out-interface=ether1 src-address=200.203.130.0/24 action=masquerade
    11 ;;; NAT BALANCEMANENTO GRUPO F
    chain=srcnat out-interface=ether1 src-address=200.203.131.0/24 action=masquerade
    12 ;;; NAT BALANCEMANENTO GRUPO G
    chain=srcnat out-interface=ether1 src-address=200.203.132.0/24 action=masquerade
    13 ;;; NAT BALANCEMANENTO GRUPO H
    chain=srcnat out-interface=ether1 src-address=200.203.133.0/24 action=masquerade
    14 ;;; NAT BALANCEMANENTO GRUPO I
    chain=srcnat out-interface=ether1 src-address=200.203.134.0/24 action=masquerade
    15 ;;; NAT BALANCEMANENTO GRUPO J
    chain=srcnat out-interface=ether1 src-address=200.203.135.0/24 action=masquerade
    16 ;;; NAT BALANCEMANENTO GRUPO L
    chain=srcnat out-interface=ether1 src-address=200.203.136.0/24 action=masquerade
    17 ;;; NAT BALANCEMANENTO GRUPO M
    chain=srcnat out-interface=ether1 src-address=200.203.137.0/24 action=masquerade
    18 ;;; NAT BALANCEMANENTO GRUPO N
    chain=srcnat out-interface=ether1 src-address=200.203.138.0/24 action=masquerade
    19 ;;; NAT BALANCEMANENTO GRUPO O

    Bom, agora que já temos todas as regras, vou explicar melhor o problema, quando eu executo o balancemento ele só funciona quando eu desabilito o proxi, existe alguma forma de eu habilitar o balanceamento juntamente com o cache?


    Att. Günther

    ola amigo !!!!!
    muito simples:
    passe o nat balanciamento grupo x , para cima do redirecionamento do proxy.
    so deixe abaixo do proxy
    chain=dstnat dst-address=189.30.30.X protocol=tcp dst-port=3389 action=dst-nat to-addresses=200.203.128.28 to-ports=3389
    3 X ;;; GUNTHER
    chain=dstnat dst-address=189.30.30.X protocol=tcp dst-port=8291 action=dst-nat to-addresses=200.203.128.252 to-ports=8291
    4 ;;; MAURICIO
    chain=dstnat dst-address=189.30.30.X protocol=tcp dst-port=3389 action=dst-nat to-addresses=200.203.128.200 to-ports=3389
    5 ;;; MAURICIO
    chain=dstnat dst-address=189.30.30.X protocol=tcp dst-port=5900 action=dst-nat to-addresses=200.203.136.28 to-ports=5900
    esses dstnat que tem as portas devem ficar abaixo do proxy e os nat balanciamento devem ficar pra cima.
    ok

  3. #3

    Padrão

    Estou com o mesmo problema, LB só funciona se desabilitar o proxy-squid... alguem tem alguma dica?