4 ms·

Okay. How can we fix this? I'm dealing with it right now and this space is so hard -- likely somewhat deliberately so. I'm a 20+ year Linux user trying to get a

by jrm4 6y ago

Okay. How can we fix this? I'm dealing with it right now and this space is so hard -- likely somewhat deliberately so. I'm a 20+ year Linux user trying to get a single home network with multiple ISPs going and it just seems way harder than it ought to be; i.e. -- not that every bit of software needs to be idiot-proof, but this iptables/pfSense/netplan etc etc universe just feels downright hostile to the aspiring home user.

hpcjoe 6y ago
It is. Multi-wan is easier with appliances. I used pfSense over the last 12 years or so with multi-wan on and off (currently off). I've run pfSense in a kvm VM, and you can do multi-wan with this. Though I generally recommend dedicated NICs for the WANs and LAN. I've looked at the linux based appliances (as late as last week) and only clearos or openwrt supported multi-wan. I could be wrong (I'd like to be as pfSense/OPNsense are FreeBSD based, and that comes with, sadly, huge amounts of baggage, limited hardware support, etc.). I'll likely be looking at that package as a potential replacement for the pfSense system, though if clearos can't handle what I need, OPNsense is like pfSense, but with far less baggage. If you don't mind tinkering, you might be able to use mwan3[1]. If you prefer OpenWRT, you can look at running it in a VM[2] along with mwan3. [1] https://github.com/Adze1502/mwan https://github.com/Adze1502/mwan [2] https://openwrt.org/docs/guide-user/virtualization/qemu https://openwrt.org/docs/guide-user/virtualization/qemu
- stock_toaster 6y ago
  I believe vyos supports WAN balancing (and/or failover).
- tesseract 6y ago
  I set up multi-WAN in a few small business contexts (on a Zyxel appliance, and on pfSense) and to be honest it was always a little flakier than I hoped. It was always failing over too quickly, or too slowly, or not reverting back to the primary WAN quickly enough when the failure/congestion cleared up. I think any sort of multi-WAN setup where you aren't actually an AS running BGP is doomed to be somewhat hacky. Of course running an AS is both a ton of work, and basically impossible for a residential customer anyway.
  - hpcjoe 6y ago
    The failbacks never actually occurred for me. I'd generally have to reboot the router.
amatecha 6y ago
Have you checked out opnsense? It features multi-WAN. I've also had a few acquaintances say they prefer it substantially over pfsense

by jrm4 6y ago

hpcjoe 6y ago

It is. Multi-wan is easier with appliances. I used pfSense over the last 12 years or so with multi-wan on and off (currently off). I've run pfSense in a kvm VM, and you can do multi-wan with this. Though I generally recommend dedicated NICs for the WANs and LAN. I've looked at the linux based appliances (as late as last week) and only clearos or openwrt supported multi-wan. I could be wrong (I'd like to be as pfSense/OPNsense are FreeBSD based, and that comes with, sadly, huge amounts of baggage, limited hardware support, etc.). I'll likely be looking at that package as a potential replacement for the pfSense system, though if clearos can't handle what I need, OPNsense is like pfSense, but with far less baggage. If you don't mind tinkering, you might be able to use mwan3[1]. If you prefer OpenWRT, you can look at running it in a VM[2] along with mwan3. [1] https://github.com/Adze1502/mwan https://github.com/Adze1502/mwan [2] https://openwrt.org/docs/guide-user/virtualization/qemu https://openwrt.org/docs/guide-user/virtualization/qemu

stock_toaster 6y ago
I believe vyos supports WAN balancing (and/or failover).
tesseract 6y ago
I set up multi-WAN in a few small business contexts (on a Zyxel appliance, and on pfSense) and to be honest it was always a little flakier than I hoped. It was always failing over too quickly, or too slowly, or not reverting back to the primary WAN quickly enough when the failure/congestion cleared up. I think any sort of multi-WAN setup where you aren't actually an AS running BGP is doomed to be somewhat hacky. Of course running an AS is both a ton of work, and basically impossible for a residential customer anyway.
- hpcjoe 6y ago
  The failbacks never actually occurred for me. I'd generally have to reboot the router.

amatecha 6y ago

Have you checked out opnsense? It features multi-WAN. I've also had a few acquaintances say they prefer it substantially over pfsense