Quantcast
Channel: EdgeRouter topics
Viewing all articles
Browse latest Browse all 20028

ERL Lost load balance after setting up Ad Blocking

$
0
0

I'm sure it's something I'm missing here... But I've been pulling my hair out on this since I discovered this afternoon the ad blocking I turned up last night has hosed my load balancing. The ad blocking works awesome, however, I've got zero traffic moving along eth0, everything is going on eth1.

 

EdgeRouter Lite running 1.8.0 in dual wan load balancing configuration.

 

Sanitized config below:

 

xxxx@EdgeRouter# show
 firewall {
     all-ping enable
     broadcast-ping disable
     group {
         network-group PRIVATE_NETS {
             network 192.168.0.0/16
             network 172.16.0.0/12
             network 10.0.0.0/8
         }
     }
     ipv6-receive-redirects disable
     ipv6-src-route disable
     ip-src-route disable
     log-martians disable
     modify balance {
         rule 10 {
             action modify
             description "do NOT load balance lan to lan"
             destination {
                 group {
                     network-group PRIVATE_NETS
                 }
             }
             modify {
                 table main
             }
         }
         rule 20 {
             action modify
             description "do NOT load balance destination public address"
             destination {
                 group {
                     address-group ADDRv4_eth0
                 }
             }
             modify {
                 table main
             }
         }
         rule 30 {
             action modify
             description "do NOT load balance destination public address"
             destination {
                 group {
                     address-group ADDRv4_eth1
                 }
             }
             modify {
                 table main
             }
         }
         rule 40 {
             action modify
             modify {
                 lb-group G
             }
         }
     }
     name WAN_IN {
         default-action drop
         description "WAN to internal"
         rule 10 {
             action accept
             description "Allow established/related"
             state {
                 established enable
                 related enable
             }
         }
         rule 20 {
             action drop
             description "Drop invalid state"
             state {
                 invalid enable
             }
         }
     }
     name WAN_LOCAL {
         default-action drop
         description "WAN to router"
         rule 10 {
             action accept
             description "Allow established/related"
             state {
                 established enable
                 related enable
             }
         }
         rule 20 {
             action drop
             description "Drop invalid state"
             state {
                 invalid enable
             }
         }
     }
     receive-redirects disable
     send-redirects enable
     source-validation disable
     syn-cookies enable
 }
 interfaces {
     ethernet eth0 {
         address dhcp
         description "Internet - WAN"
         duplex auto
         firewall {
             in {
                 name WAN_IN
             }
             local {
                 name WAN_LOCAL
             }
         }
         speed auto
     }
     ethernet eth1 {
         address dhcp
         description "Internet - WAN 2"
         duplex auto
         firewall {
             in {
                 name WAN_IN
             }
             local {
                 name WAN_LOCAL
             }
         }
         speed auto
     }
     ethernet eth2 {
         address 192.168.0.1/24
         description Local
         duplex auto
         firewall {
             in {
                 modify balance
             }
         }
         speed auto
     }
     loopback lo {
     }
 }
 load-balance {
     group G {
         interface eth0 {
         }
         interface eth1 {
         }
         sticky {
             dest-addr enable
         }
     }
 }
 service {
     dhcp-server {
         disabled false
         hostfile-update disable
         shared-network-name LAN {
             authoritative enable
             subnet 192.168.0.0/24 {
                 default-router 192.168.0.1
                 dns-server 192.168.0.1
                 lease 86400
                 start 192.168.0.25 {
                     stop 192.168.0.175
                 }
             }
         }
     }
     dns {
         forwarding {
             cache-size 150
             listen-on eth2
         }
     }
     gui {
         https-port 443
     }
     nat {
         rule 5000 {
             description "masquerade for WAN"
             outbound-interface eth0
             type masquerade
         }
         rule 5002 {
             description "masquerade for WAN 2"
             outbound-interface eth1
             type masquerade
         }
     }
     snmp {
         community public {
             authorization ro
         }
     }
     ssh {
         port 22
         protocol-version v2
     }
 }
 system {
     conntrack {
         expect-table-size 4096
         hash-size 4096
         table-size 32768
         tcp {
             half-open-connections 512
             loose enable
             max-retrans 3
         }
     }
     host-name EdgeRouter
     login {
        xxxxxxxxx
         }
     }
     ntp {
         server 0.ubnt.pool.ntp.org {
         }
         server 1.ubnt.pool.ntp.org {
         }
         server 2.ubnt.pool.ntp.org {
         }
         server 3.ubnt.pool.ntp.org {
         }
     }
     syslog {
         global {
             facility all {
                 level notice
             }
             facility protocols {
                 level debug
             }
         }
     }
     time-zone UTC
     traffic-analysis {
         dpi enable
         export enable
     }
 }
[edit]

Viewing all articles
Browse latest Browse all 20028

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>