<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hi, Phang<div class=""><br class=""></div><div class="">Thank you, I figured this out by tcp load balance, where the mangle table of iptables can do the work.</div><div class=""><br class=""></div><div class="">I setup two tinc tunnels, and using mangle PREROUTING to track connection and mark packet, then do the policy routing to send to each tinc tunnel.</div><div class=""><br class=""></div><div class="">so in this case, I just imagine the two tunnels tinc build just like two interface, and do the per flow load balancing across those two interfaces.<br class=""><div class="">
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;"><br class="Apple-interchange-newline"><br class=""></div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">Best Regards<br class=""><br class="">Bright Zhao<br class="">✉</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class=""><br class=""></div><br class="Apple-interchange-newline">
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">On 29 Oct 2017, at 8:02 PM, Phang Mulianto <<a href="mailto:braveh4rt@gmail.com" class="">braveh4rt@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="auto" class="">Hi,<div dir="auto" class=""><br class=""></div><div dir="auto" class="">You mean use the vpn link as active active? </div><div dir="auto" class=""><br class=""></div><div dir="auto" class="">What service run for the vpn? </div><div dir="auto" class=""><br class=""></div><div dir="auto" class="">If pure tcp load balance, iptables can do these needs.</div><div dir="auto" class="">If http service you can use L7 load balancer </div></div><div class="gmail_extra"><br class=""><div class="gmail_quote">On 29 Oct 2017 7:04 pm, "Bright Zhao" <<a href="mailto:startryst@gmail.com" target="_blank" class="">startryst@gmail.com</a>> wrote:<br type="attribution" class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word" class="">Let’s say, tinc A node server LAN-1(single internet circuit), tinc B node and tinc C node are both serve LAN-2.(two internet circuits)<div class=""><br class=""></div><div class="">Normally, we can only set tinc A to connect to either B or C, and then the other set as backup.</div><div class=""><br class=""></div><div class="">But in some circumstances, we would like to combine the internet pipe of both two circuits, so that the tunnel traffic can have a better bandwidth.</div><div class=""><br class=""></div><div class="">If that’s the case, is there anyway we can load-balance the traffic from LAN-1 to LAN-2’s dual internet entry point, for example, load-balance per flow.<br class=""><div class="">
<div style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;" class=""><br class="m_-9124258777283689634Apple-interchange-newline"><br class=""></div><div style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;" class="">Best Regards<br class=""><br class="">Bright Zhao<br class="">✉</div><div style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px;" class=""><br class=""></div><br class="m_-9124258777283689634Apple-interchange-newline">
</div>
<br class=""></div></div><br class="">______________________________<wbr class="">_________________<br class="">
tinc mailing list<br class="">
<a href="mailto:tinc@tinc-vpn.org" class="">tinc@tinc-vpn.org</a><br class="">
<a href="https://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc" rel="noreferrer" target="_blank" class="">https://www.tinc-vpn.org/cgi-<wbr class="">bin/mailman/listinfo/tinc</a><br class="">
<br class=""></blockquote></div></div>
_______________________________________________<br class="">tinc mailing list<br class=""><a href="mailto:tinc@tinc-vpn.org" class="">tinc@tinc-vpn.org</a><br class="">https://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc<br class=""></div></blockquote></div><br class=""></div></body></html>