FC Routing Help

Posted on 2006-04-13
Last Modified: 2010-03-18
Ok I am trying to setup some routing on my squid server using iproute2 basically I would like to setup 2 tables

Table 1 "Wireless"
Table 2 "Office"

Vlan1   |<--------->Eth0 Squid<---->Eth1 Squid| network
Vlan2 |                                                        | network

Squid Server

What I would like is for all traffic in network, that goes through Eth1 be routed out through Eth0 and vice versa.  This way both networks can use the server on the same nic.  My problem is I can't get a proper start on this because the examples I have found all seem to refur to load balancing 2 ISP's.  Any input on how to accomplish this would be great.

I would also like ot note that this is going to be setup as a transparent quid server so I will have port forward nat redirect for port 80 to 3128

Question by:hexfusion
    LVL 27

    Expert Comment

    It's not clear is a link between Router and Squid is a trunk with 2 VLANs or just not tagged ethernet?

    'I would like is for all traffic in network, that goes through Eth1 be routed out through Eth0' - you don't need iproute2 functionality for that, just old style routing.

    If you need to route to
    and to
    then you need iproute2.

    Very good book about policy based routing is here:
    Also look here:

    What about transparent squid, I've never used it because squid failure leads to unavailability of http:// access (even if it's possible to access internet directly)
    LVL 19

    Accepted Solution

    Hello sam

    you cannot route when you have the same network address space on both sides. this will not work.

    fortunately, for what you want to do, you can setup a bridge using eth0 and eth1. That way your box become a layer 2 device and all networks can pass freely.

    But having a linux box that way without filtering makes no sense. so here some links to help you to setup linux as a bridge AND as a firewall:

    hope this helps
    LVL 2

    Author Comment

    In the end I decided to keep the squid box using only onenic achieving basically the same thing.  Nopius as with anything critical making sure you have proper redundancy is the only solution to that.  The plus side of using a proxy in a large network can make a big difference with performance.  We because of physical constraints must pipe all bandwidth via high end VSAT which is expensive bandwidth.  In a decent sized network I found a caching proxy to be the only solution to minimizing bandwidth while improving performance.  But everyones situation is diffent of course.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    I have seen several blogs and forum entries elsewhere state that because NTFS volumes do not support linux ownership or permissions, they cannot be used for anonymous ftp upload through the vsftpd program.   IT can be done and here's how to get i…
    Note: for this to work properly you need to use a Cross-Over network cable. 1. Connect both servers S1 and S2 on the second network slots respectively. Note that you can use the 1st slots but usually these would be occupied by the Service Provide…
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now