Below is the how to provided by astaro for routing the HTTP proxy over a second gateway.
I've done this and it seems to work well, but if the first gateway goes down as it did today then no one can browse the web via the proxy.
I have also routed the DNS proxy via the second gateway thinking that may be the problem but just the same.
Surely the first gateway should not effect the second?
Any Ideas?
Carl
Release 6.100
http://portal.knowledgebase.net/display/2/kb/article.asp?aid=166241
The following step-by-step instruction describes the configuration of policy-based-routing on two possible ways:
1. Simultaneously using the proxy-functionality on ASL.
Create your secondary internet-access, e.g. DSL. When this line is established by a router in front of Astaro, create additionally the gateway-IP as a host definition.
Webadmin -> Network -> Routing -> policy based routing, for example HTTP
Source: External Address (that one currently with the default gateway on)
Source Interface: Any
Destination: Any
Service: HTTP
Target: Gateway-IP of your secondary Interface (even if this has none itself, since you can only define one gateway), or PPPOE-Interface-Address
Additionally you need SNAT-rule to replace the external IP to the new target interface.
Webadmin -> Network -> NAT/Masquerading
Source: external address of the primary line
Destination: any
Service: http
Change source to: external address of the secondary interface
The same is for SMTP or SMTP-Proxy but also take care you have your MX-record set on the right external IP also for incoming traffic.
2. Policy-based-routing without using the proxy functionality
- The first step is the same as in the configuration above, you create the second line into the internet.
- Webadmin -> Network -> Routing -> policy based routing
Source: Any
Source Interface: Internal Network
Destination: Any
Service: HTTP
Target: Gateway-IP of your secondary Interface (even if this has none itself, since you can only define one gateway), or PPPoE-Interface-Address
- In addition you need a additional masquerading rule, like you should have for your default gateway interface
This thread was automatically locked due to age.