Firewall Wizards mailing list archives

Re: dual ISP connections


From: "Brian Loe" <knobdy () gmail com>
Date: Tue, 27 Jun 2006 13:34:32 -0500

On 6/27/06, James Paterson <jpaterson () datamirror com> wrote:
We went through this same thing several years back, BGP is a large
hassle that is really not necessary these days, you can get devices made
by several vendors that handle this type of high availability / load
balancing. Radware's LinkProof, F5's Big IP are a couple, and there are
many more. No need for ASN's no need for a full /24 network, it all
works via DNS.

Cheers
James

That certainly sounds interesting - it just lets DNS alternate which
ISP that customer uses? See any problems with the 40+ site-to-site VPN
users, since they're up all the time (with luck)? I would think their
routes stay pretty static anyway.

For Mathew, we're using BGP now - though the one carrier's network
throws a fit with it more often than we would like.

More of the details of our current situation: we have a burstable DS3
from one carrier and two T1s from another. Going out, we route all
associates through the smaller connection. Coming in we hope that
customers will use the bigger pipe and far too often that isn't the
case. The smaller carrier is the one that has BGP spasms.
_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards


Current thread: