Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » Multiple Internet Link - Load Balancing
  •  
LSimpson

Messages: 8
Karma: 0
Send a private message to this user
Currently in Kerio Control our interface setting is set to Multiple Internet Link - Load Balancing. We have two Internet Service Providers with two different (unequal) internet speed and both are set to carry a link weight balance of 50.

Service Provider 1 - Fiber connection which is 15Mbps and is set to the primary internet interface.
Service Provider 2 - DSL connection which is 10Mbps and is set to the secondary internet interface.

PROBLEM WE ARE FACING

When the secondary internet link goes down "moving slow" our users are unable to browse the internet as if there is no internet connectivity at all. The primary (Fiber) internet connectivity doesn't help at all with internet browsing, it is as if its not there.

Could you assist as to why this might be happening and what can be done to resolve this issue please.

Configuration Setting for both internet interfaces are:

Primary Connection
Configuration: Manual
IP Address: 84.72.101.163
Gateway: 84.72.101.1
DNS: 8.8.8.8;65.183.0.78;65.183.0.84;8.8.4.4

Secondary Connection
Configuration: Manual
IP Address: 100.1.0.24
Gateway: 100.1.0.1
DNS: 8.8.8.8;8.8.4.4
  •  
ksnyder (KERIO)

Messages: 549
Karma: 35
Send a private message to this user
Unfortunately, a "slow" connection doesn't constitute a failure - so the failover scheme doesn't kick in until a link is actually "down".

That said, I might modify the weight to be 3 for the fiber and 2 for the DSL.

I'd also consider implementing QoS and Bandwidth management rules that place some bandwidth limitations on Normal and Undesirable types of traffic. For example, you might specify that there be a limit/maximum of 10% of the link speed that can be consumed by: large file downloads, email, multimedia, gaming websites, social media, shopping, etc. You may consider a companion rule that RESERVES a fixed amount (or %) of bandwidth for Web Browsing and anything else that you consider to be critical traffic. You can do this across all links, or just one of the two (Fiber or DSL)...or build separate rules for each.

The nice thing about the RESERVE rules is that they're on-demand. So if there's no traffic that matches the type defined in the rule, the reservation isn't executed. It's ONLY executed if there's a match to the traffic type

[Updated on: Wed, 25 February 2015 21:10]


Ken Snyder
Director, Sales Engineering | Kerio
Stay Connected Anytime, Anywhere. Discover Kerio Cloud!
  •  
LSimpson

Messages: 8
Karma: 0
Send a private message to this user
Relating to your statement Unfortunately, a "slow" connection doesn't constitute a failure - so the failover scheme doesn't kick in until a link is actually "down".


Are you saying that we are facing this problem of slow connection because the "Secondary internet connection (DSL) is not completely "down" but technically "slow"?

Will we see a better result of browsing if the secondary goes "down"?
  •  
Brian Carmichael (Kerio)

Messages: 582
Karma: 58
Send a private message to this user
It seems that your DSL line is not very reliable. Perhaps a better solution is to use it only as a failover link, rather than load balanced. As Ken indicated, Kerio Control doesn't consider if the link is slow. If it gets ping replies from the probe host, then it perceives the link as up and continues to route traffic through it. Perhaps in your case, a more suitable method of connectivity checking would be to use a combination of DNS, TCP connectivity, and ICMP. At the moment our detection of link availability is not this sophisticated. You might consider filing a feature request for a more sophisticated connectivity detection. You can do this using the "suggest idea" button in the web administration.

Brian Carmichael
Senior Technical Marketing Engineer | Kerio
Stay Connected Anytime, Anywhere. Discover Kerio Cloud!
Previous Topic: Fight angaist ransomware cryptolocker
Next Topic: Change views of "Active Hosts" Screen
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Tue Jan 24 01:54:38 CET 2017

Total time taken to generate the page: 0.00769 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.