Forums

Resolved
0 votes
Recently i setup clearos and i want to use it as gateway so i have 2 internet connection 2 Mbps ADSL & other is 4mbps DSL i want to load balance it so what i do is i setup pc with 3 NIC
1 as LAN = 192.168.1.1/24
2 as EXTERNAL DHCP with automatic DNS = 192.168.50.1/24
3 as EXTERNAL DHCP with automatic DNS = 192.168.100.1
My problem is i get internet access on LAN but load balancing not working in Multi want both online and in use with weight 1 so help me what i did wrong i get only 1 connection speed suppose i will get around 6mbps as i combine 4mb & 2mb but i getting only 3mb and failover need 1-2 minute to switch if i put 1 line out internet off for 1-2 min in lan side its taking time to switch from one to other so please help me and sorry for bad english
Monday, September 04 2017, 10:20 AM

Location [ View Larger Map ]

http://maps.googleapis.com/maps/api/staticmap?center=22.3038945,70.80215989999999&language=en&maptype=roadmap&zoom=5&size=450x300&sensor=true&markers=color:red|label:S|22.3038945,70.80215989999999
Share this post:
Responses (19)
  • Accepted Answer

    Monday, September 04 2017, 07:28 PM - #Permalink
    Resolved
    0 votes
    You will never get 6Mbps out of this set up on a single downlad. That requires a special bonding set up from your ISP. You should, however, be able to get two separate downloads at 4Mbps and 2Mbps simultaneously and torrents (which are multiple parallel downloads) may get up to 6Mbps.

    When using MultiWAN, unless both your WAN's use the same ISP and the same DNS servers, it is highly recommended to switch to using manual public DNS servers such as OpenDNS or GoogleDNS. If you don't you risk getting very poor DNS responses or failure.

    Please also give the output to:
    lspck -knn | grep Eth -A 3
    Like
    1
    The reply is currently minimized Show
  • Accepted Answer

    Tuesday, September 05 2017, 04:59 AM - #Permalink
    Resolved
    0 votes
    Thanks for the reply here is the output of lspci -knn | grep Eth -A 3

    01:00.0 Ethernet controller [0200]: Qualcomm Atheros AR8121/AR8113/AR8114 Gigabit or Fast Ethernet [1969:1026] (rev b0)
    Subsystem: ASUSTeK Computer Inc. P5KPL-CM Motherboard [1043:8304]
    Kernel driver in use: ATL1E
    Kernel modules: atl1e
    03:00.0 Ethernet controller [0200]: Realtek Semiconductor Co., Ltd. RTL-8100/8101L/8139 PCI Fast Ethernet Adapter [10ec:8139] (rev 10)
    Subsystem: Realtek Semiconductor Co., Ltd. RTL-8100/8101L/8139 PCI Fast Ethernet Adapter [10ec:8139]
    Kernel driver in use: 8139too
    Kernel modules: 8139cp, 8139too
    03:01.0 Ethernet controller [0200]: Realtek Semiconductor Co., Ltd. RTL-8100/8101L/8139 PCI Fast Ethernet Adapter [10ec:8139] (rev 10)
    Subsystem: Realtek Semiconductor Co., Ltd. RTL-8100/8101L/8139 PCI Fast Ethernet Adapter [10ec:8139]
    Kernel driver in use: 8139too
    Kernel modules: 8139cp, 8139too
    The reply is currently minimized Show
  • Accepted Answer

    Tuesday, September 05 2017, 05:04 AM - #Permalink
    Resolved
    0 votes
    How to switch public dns i dont know it can you help me Line 1 - 218.248.255.209 & 218.248.255.139 and line 2 - 192.168.100.115 so how i put public dns like 8.8.8.8 or 8.8.4.4 can work ?
    The reply is currently minimized Show
  • Accepted Answer

    Tuesday, September 05 2017, 12:26 PM - #Permalink
    Resolved
    0 votes
    Your NIC drivers are OK.

    Have you changed to manual DNS servers?

    I'm afraid I have no real life experience of MultiWAN so I can't comment on your configuration.
    The reply is currently minimized Show
  • Accepted Answer

    Tuesday, September 05 2017, 12:47 PM - #Permalink
    Resolved
    0 votes
    Yes i have setup manual dns servers which comes with isp
    1) 218.248.255.209 & 218.248.255.139
    2) 192.168.100.115

    This is my dns setup

    And you said earlier that i can get speed on two separate downloads at 4Mbps and 2Mbps simultaneously and torrents how can i do that ? right now my speed getting devided and how can i give weight i have 4mbps and 2mbps line

    Thanks in advance :)
    The reply is currently minimized Show
  • Accepted Answer

    Tuesday, September 05 2017, 01:05 PM - #Permalink
    Resolved
    0 votes
    The whole point of manual DNS servers is to avoid your ISP's ones. The problem is that ClearOS will normally pick the first DNS server on the list to send the DNS request to. lets say this belongs to ISP1. Many ISP's only allow you to access their DNS servers from their networks. This means in a load balanced MultiWAN environment your request could go to ISP1's DNS server through the interface connected to ISP2. ISP1 will reject this and you'll get a failed lookup. ClearOS will (may - depending on the response from ISP1) then try the second DNS server on your list which may also be to ISP1 - and this could go through either interface and so on. You can end up with really poor DNS lookup times. The way round that is to use Public DNS servers which will work irrespective of the ClearOS interface used. I have suggested OpenDNS or GoogleDNS, but there are quite a few others. Just google "public DNS server".

    Some ISP's DNS servers are public. In that case you are OK, but it is not so likely.
    The reply is currently minimized Show
  • Accepted Answer

    Tuesday, September 05 2017, 02:31 PM - #Permalink
    Resolved
    0 votes
    Pratik Mawkana G wrote:

    How to switch public dns i dont know it can you help me Line 1 - 218.248.255.209 & 218.248.255.139 and line 2 - 192.168.100.115 so how i put public dns like 8.8.8.8 or 8.8.4.4 can work ?

    I am working from memory not, but on the IP Settings page there should be a check box saying something like "Manual servers" under the DNS Servers box. Check it. You should then be able to edit the DNS servers. If you can't find it, you'll have to wait until I get to my system.
    The reply is currently minimized Show
  • Accepted Answer

    Tuesday, September 05 2017, 05:19 PM - #Permalink
    Resolved
    0 votes
    OK, home now. You need to go to Webconfig > Network > Settings > IP Settings > Select your interface > Remove the check box "Automatic DNS Servers" > Update then you should be able to Edit the DNS Servers.
    The reply is currently minimized Show
  • Accepted Answer

    Wednesday, September 06 2017, 08:25 AM - #Permalink
    Resolved
    0 votes
    Hello i did as you said

    " go to Webconfig > Network > Settings > IP Settings > Select your interface > Remove the check box "Automatic DNS Servers" > Update then you should be able to Edit the DNS Servers."

    INow i cant open any other site than google if i open google its opening but if i trying to open youtube.com , facebook.com and any other site it wont load . it's because i set OPEN PUBLIC DNS so now what i do ?

    Right now my DNS is
    208.67.222.222
    208.67.220.220

    and i also tried
    8.8.4.4
    8.8.8.8
    The reply is currently minimized Show
  • Accepted Answer

    Wednesday, September 06 2017, 08:46 AM - #Permalink
    Resolved
    0 votes
    That does not make sense unless your ISP's are blocking them (unlikely) so I don't know what is going on. I flip between using OpenDNS on a single WAN and using my own hosted unbound DNS Server and have no issues either way.

    Did you uncheck the "Automatic DNS Servers" setting on both WAN's?

    What is the contents of /etc/resolv-peerdns.conf and /etc/resolv.conf?
    The reply is currently minimized Show
  • Accepted Answer

    Wednesday, September 06 2017, 09:17 AM - #Permalink
    Resolved
    0 votes
    Nick Howitt wrote:

    That does not make sense unless your ISP's are blocking them (unlikely) so I don't know what is going on. I flip between using OpenDNS on a single WAN and using my own hosted unbound DNS Server and have no issues either way.

    Did you uncheck the "Automatic DNS Servers" setting on both WAN's?

    What is the contents of /etc/resolv-peerdns.conf and /etc/resolv.conf?


    Yes i have unchecked both WAN's Automatic DNS Server and contents of

    /etc/resolv.conf
    # Please do not edit this file.
    # See http://www.clearcenter.com/support/documentation/clearos_guides/dns_and_resolver
    domain clearos.com
    nameserver 127.0.0.1

    /etc/resolv-peerdns.conf
    ; generated by /usr/sbin/dhclient-script
    nameserver 208.67.222.222
    nameserver 208.67.220.220
    The reply is currently minimized Show
  • Accepted Answer

    Wednesday, September 06 2017, 10:04 AM - #Permalink
    Resolved
    0 votes
    I am completely stumped at the moment as your resolvers are correctly set up. I am not comfortable with your domain name (clearos.com) as this is a valid domain externally. Please can you change it either to a domain name that you own or to an invalid one such as clearos.lan? I don't think it should interfere, but it will send a whole load of invalid DNS requests to the internet.

    When you can't reach any site, is that from a LAN PC? If so, what is the output of "ipconfig /all" from a command prompt on the PC?
    The reply is currently minimized Show
  • Accepted Answer

    Thursday, September 07 2017, 06:34 AM - #Permalink
    Resolved
    0 votes
    Nick Howitt wrote:

    I am completely stumped at the moment as your resolvers are correctly set up. I am not comfortable with your domain name (clearos.com) as this is a valid domain externally. Please can you change it either to a domain name that you own or to an invalid one such as clearos.lan? I don't think it should interfere, but it will send a whole load of invalid DNS requests to the internet.

    When you can't reach any site, is that from a LAN PC? If so, what is the output of "ipconfig /all" from a command prompt on the PC?


    Ok i did change the domain name clearos.com to clearos.lan and i yes i can't reach any site from LAN pc expect than google my LAN pc has DHCP & here is output of ifconfig in LAN PC

    np2s0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
    inet 192.168.1.103 netmask 255.255.255.0 broadcast 192.168.1.255
    inet6 fe80::97ae:7750:783a:3e30 prefixlen 64 scopeid 0x20<link>
    ether 94:de:80:83:89:83 txqueuelen 1000 (Ethernet)
    RX packets 12187 bytes 9413858 (9.4 MB)
    RX errors 0 dropped 0 overruns 0 frame 0
    TX packets 13983 bytes 3591585 (3.5 MB)
    TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

    lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
    inet 127.0.0.1 netmask 255.0.0.0
    inet6 ::1 prefixlen 128 scopeid 0x10<host>
    loop txqueuelen 1000 (Local Loopback)
    RX packets 4347 bytes 373913 (373.9 KB)
    RX errors 0 dropped 0 overruns 0 frame 0
    TX packets 4347 bytes 373913 (373.9 KB)
    TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
    The reply is currently minimized Show
  • Accepted Answer

    Thursday, September 07 2017, 07:00 AM - #Permalink
    Resolved
    0 votes
    Ah. I assumed you were running Windows on your LAN. What I am after is what your LAN PC sees as its DNS server (perhaps the contents of its /etc/resolv.conf), and what is the LAN IP of ClearOS.

    Also what is the contents of /etc/dnsmasq.d/dhcp.conf?
    The reply is currently minimized Show
  • Accepted Answer

    Thursday, September 07 2017, 07:50 AM - #Permalink
    Resolved
    0 votes
    Nick Howitt wrote:

    Ah. I assumed you were running Windows on your LAN. What I am after is what your LAN PC sees as its DNS server (perhaps the contents of its /etc/resolv.conf), and what is the LAN IP of ClearOS.

    Also what is the contents of /etc/dnsmasq.d/dhcp.conf?


    im running LINUX on LAN yes i get it you want to know what DNS is my LAN PC using

    My CLEAR OS LAN IP = 192.168.1.1/24

    MY LAN CLIENT PC with DHCP config
    IP = 192.168.1.101/24
    GATEWAY 192.168.1.1
    DNS 192.168.1.1

    ## contents of /etc/dnsmasq.d/dhcp.conf

    hcp-option=enp1s0,1,255.255.255.0
    dhcp-option=enp1s0,28,192.168.1.255
    dhcp-option=enp1s0,3,192.168.1.1
    dhcp-option=enp1s0,6,192.168.1.1
    dhcp-range=enp1s0,192.168.1.100,192.168.1.254,12h
    read-ethers
    The reply is currently minimized Show
  • Accepted Answer

    Thursday, September 07 2017, 08:51 AM - #Permalink
    Resolved
    0 votes
    I don't see anything wrong with your DNS set up and I can't do any testing at work. There are ways of using "nslookup" and "dig" from ClearOS to determine if your DNS lookups are working OK. If they are working then to problem moves on to a routing/multiwan issue. I will get virtually no time tonight so probably cannot have a look until at least tomorrow afternoon.

    You could try a "traceroute facebook.com" and see if it resolves correctly and also see what path it chooses and why it fails.
    The reply is currently minimized Show
  • Accepted Answer

    Thursday, September 07 2017, 10:02 AM - #Permalink
    Resolved
    0 votes
    Nick Howitt wrote:

    I don't see anything wrong with your DNS set up and I can't do any testing at work. There are ways of using "nslookup" and "dig" from ClearOS to determine if your DNS lookups are working OK. If they are working then to problem moves on to a routing/multiwan issue. I will get virtually no time tonight so probably cannot have a look until at least tomorrow afternoon.

    You could try a "traceroute facebook.com" and see if it resolves correctly and also see what path it chooses and why it fails.


    i did dig google.co.in in CLEAR OS

    # dig google.co.in

    ; <<>> DiG 9.9.4-RedHat-9.9.4-50.el7_3.1 <<>> @192.168.1.1 google.co.in
    ; (1 server found)
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60297
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

    ;; OPT PSEUDOSECTION:
    ; EDNS: version: 0, flags:; udp: 4096
    ;; QUESTION SECTION:
    ;google.co.in. IN A

    ;; ANSWER SECTION:
    google.co.in. 50 IN A 216.58.199.131

    ;; Query time: 0 msec
    ;; SERVER: 192.168.1.1#53(192.168.1.1)
    ;; WHEN: Thu Sep 07 15:12:04 IST 2017
    ;; MSG SIZE rcvd: 57


    # traceroute facebook.com
    traceroute to facebook.com (31.13.78.35), 30 hops max, 60 byte packets
    1 192.168.50.114 (192.168.50.114) 4.499 ms 4.611 ms 4.869 ms
    2 * * *
    3 218.248.169.166 (218.248.169.166) 19.910 ms 23.265 ms 25.643 ms
    4 218.248.235.197 (218.248.235.197) 42.012 ms 44.383 ms 46.520 ms
    5 218.248.235.198 (218.248.235.198) 48.896 ms 50.760 ms 52.459 ms
    6 115.113.165.93.static-mumbai.vsnl.net.in (115.113.165.93) 56.518 ms 53.637 ms 61.246.195.185 (61.246.195.185) 57.652 ms
    7 182.79.178.35 (182.79.178.35) 112.793 ms 96.494 ms 99.739 ms
    8 ix-ae-4-2.tcore1.CXR-Chennai.as6453.net (180.87.36.9) 72.802 ms ae10.pr03.sin1.tfbnw.net (157.240.65.230) 262.732 ms 263.482 ms
    9 * * if-ae-5-2.tcore1.SVW-Singapore.as6453.net (180.87.12.53) 95.253 ms
    10 * * *
    11 * * *
    12 * * *
    13 * * *
    14 * * *
    15 * * *
    16 * * *
    17 * * *
    18 * * *
    19 * * *
    20 * * *
    21 * * *
    22 * * *
    23 * * *
    24 * * *
    25 * * *
    26 * * *
    27 * * *
    28 * * *
    29 * * *
    30 * * *
    The reply is currently minimized Show
  • Accepted Answer

    Thursday, September 07 2017, 11:47 AM - #Permalink
    Resolved
    0 votes
    Doesn't your traceroute show a DNS lookup success but a routing failure somewhere after if-ae-5-2.tcore1.SVW-Singapore.as6453.net (180.87.12.53), unless nothing after the core router responds to pings.

    Can you try setting a destination port rule for tcp:443 on one of your interfaces and see if you can browse google or facebook?
    The reply is currently minimized Show
  • Accepted Answer

    Monday, September 11 2017, 01:26 PM - #Permalink
    Resolved
    0 votes
    Hello Sorry for late reply i was busy bit :(

    I setup fresh install now with default dns set 8.8.8.8 & 8.8.4.4 now i can open any site.

    Now you said earlier i didnt get total 6mbps as i have 4mbps & 2mbps line but you said i can get individual 4mbps and 2 mbps so how i can do that what weight should i give both line?

    how i know my load balancing are working correctly In Multi-Wan both are Online ip and dns are same as previous.
    The reply is currently minimized Show
Your Reply