Flowtable in a load balancer

DISCUSSION Eliezer Croitor 1 participant 1 message Dec 7, 2020

Share & tools

Eliezer Croitor

author

2020-12-07 15:18 UTC #0 lore raw

I am trying to understand where can I use flowtable on a load balancer. Also if and how it will work with PBR.

I have created a nftables load balancer lab at:
. https://github.com/elico/mwan-nft-lb-example
. https://github.com/elico/mwan-nft-lb-example/blob/main/run-lab.sh

I know that flow tables cannot work with PBR but not sure on what degree. Also maybe something is needed possible..

I will try to describe the lab:
1 client
ether0: 192.168.125.100/24 gw 192.168.125.254
1 Lan GW
ether0: 192.168.125.254/24
ether5-15: 192.168.205-215.254/24 (10 ~ wan interfaces with ip addresses)
15 WAN Routers
ether0: 192.168.101.5-15/24( a single ip per WAN Router) (SNAT ie
MASQUERADE)
ether1: 192.168.205-215.254/24( a single ip per WAN Router)

1 Edge_R_Web_service
ether0: 192.168.89.99/24 (SNAT ie MASQUERADE) GW 192.168.89.254
(MASQUEARDE to the Real WORLD)
ether1: 192.168.101.254/24

This lab tests the LB of the LAN GW towards the WAN Routers and verifies the result via a HTTP request.
The client sends a http request towards 192.168.101.254 and then receives the ip address of the WAN Router at the 192.168.101.0/24 net.

If it's possible to use flowtable on any of the Routers on this network I would like to make sure I understood right.

Thanks,
Eliezer

----
Eliezer Croitoru
Tech Support
Mobile: +972-5-28704261
Email: [email protected]