[#] Using ifstated to monitor links and dynamically adjust PF config on event **
undeadly.org(obsdave,1) — All
2014-07-31 17:55:05


http://undeadly.org/cgi?action=article&sid=20140731130633

Contributed by [pitrh](http://bsdly.blogspot.com/) on Thu Jul 31 13:05:27 2014 (GMT)
from the states of confusion dept.

[Sevan Janiyan]() writes:

> It's possible to misuse NAT to load balance outbound traffic across multiple internet connections from different service providers,see the [Load Balance Outgoing Traffic](http://www.openbsd.org/faq/pf/pools.html#outgoing) section of [PF FAQ](http://www.openbsd.org/faq/pf).

The shortfall with this configuration is when implemented alongside unstable links, forwarding will continue to be attempted over the links which are down, this will cause issues such as long hangs for users behind the NAT while connections time out. To mitigate this, `ifstated` can be used to smooth things over.


Read the rest at [geeklan.co.uk](https://www.geeklan.co.uk/?p=1564), Sevan's blog site.