|
Manta, Ecuador
Site Administrator Developer Swing Trader
Experience: Advanced
Platform: Custom solution
Broker: IBKR
Trading: Stocks & Futures
Frequency: Every few days
Duration: Weeks
Posts: 50,669 since Jun 2009
Thanks Given: 33,669
Thanks Received: 102,583
|
So for many, many years, I've used various types of hardware that supports multiple WAN's in a kind of failover/failback mode. As they got more advanced throughout the years, some of them supported aggregation, but only in the sense of multiple clients (ie users) would be aggregated seemingly well, which is not a useful scenario for me as a single person.
The idea of VPN bonding is that it can achieve single thread aggregation (single connection, like a single HTTP download request as an example) over two uplinks (or more) concurrently, while also providing all the usual redundancy.
Because of the way the connections are bonded, there is zero delay in failover. With a traditional failover, there would be about a 10 second delay as the router figures out one of the uplinks died, then starts pushing everything solely over the other link, but this delay is exacerbated because on your Windows workstation (ie Sierra, YouTube, webinars, whatever) the connection (for instance, HTTP) would be broken, then a re-connect needed to be performed by the application. This is not seamless, and while for less demanding purposes it is fine, it's not acceptable for a real professional environment.
For my test I'll be using Zeroshell, a open source platform that I'll install on a NUC type device (overkill honestly) between my switches and my routers. The Zeroshell device will become the new gateway for the LAN, and it will then handle the uplink traffic to the actual routers leaving my site (ie Microwave and Fiber).
To make this type of VPN bonding work, you also need a pair of ports on a remote server that has more bandwidth than the combined total of your two (or more) aggregated ports on the local site. I do, in Chicago. I already use one of my servers in Chicago as a VPN, although there is some concern here with this type of bonding and latency, but I am hoping it won't dramatically reduce efficiency.
So on the server side in Chicago will also set a Zeroshell installation, just a VM running under a physical box on Debian. It will have two dedicated IP's assigned to it (the VM), one for each virtual interface.
On my local site, I'll also have two IP's, one for Microwave and one for Fiber. These will be bonded and connect to the bonded interface in Chicago and form a LAN-to-LAN VPN (Layer 2).
The advantage of this type of setup is that there is no client-side configuration necessary (ie: Windows boxes, Linux boxes, PS4, etc) on my local network. They all just continue working like normal. No special configuration necessary. The aggregation and VPN takes place transparently on the Zeroshell router itself (instead of for example using OpenVPN on your workstation).
Wish me luck. I'm not sure when I'll have time to make some progress, but it's on my list. Higher priority recently because my primary internet connection (Microwave) has been real flaky recently with as many as 20 disconnects per day, each lasting only about 2 seconds, but causing constant reconnects in Sierra Chart and making it impossible for me to put on new webinars.
Mike
|