Can someone shed light on Peplink topology


#1

Hi Guys,

I am novice to peplink and confused about the topology. Would really appreciate if someone can shed light on the same. I am planning to use Inbound DNS loadbalancing, I already have two WAN links terminated on my firewall. So per me I guess the topology would look like this and let me know if I am doing something wrong

INTERNET -->[20.20.20.20]PepLink[172.16.1.1]----> [172.16.1.2]Firewall[192.168.1.1]—>LAN=Servers [test.example.com]192.168.1.5

My zone is example.com and would like to loadbalance test.example.com which is on my LAN on private subnet [192.168.1.5]

example.com NS some.thirdparty.device
some.thirdparty.device A 1.1.1.1
test.example.com NS wan.ipof.peplink
wan.ipof.peplink A 20.20.20.20

On my Pep Link
20.20.20.21 ==NATTED TO 192.168.1.5

Then send it to firewall which will route it to destination server


#2

Hi,

Please refer to the links below for better understanding:-

  1. Understanding Inbound Load Balancing - http://www.peplink.com/knowledgebase/understanding-inbound-load-balancing/

  2. Setting up Inbound Load Balance with a Delegated Sub-domain - http://www.peplink.com/knowledgebase/setting-up-inbound-load-balance-with-a-delegated-sub-domain/


#3

Hi tkliew,

Thanks for the update. I have already gone through the topology and studied that. However this describes without firewall what if I plan to put firewall behind Peplink and let all filtering done by that firewall and natting only done by Peplink?

Also lets say I have two sub-domain delegated like test.example.com and foo.example.com. Now being a sub-domains NS servers will be the WAN links and in this case for the both the records my NS will be same [am I correct]?

So Can I specifiy separate A record for those 2 subdomains? if not how would forward traffic to different hosts if destined on same port i.e. 80.

e.g

WAN1 1.1.1.1
WAN2 2.2.2.2
LAN 172.16.1.1/24

test.example.com IN NS wan1.example.com
wan2.example.com

foo.example.com IN NA wan1.example.com
wan2.example.com

So in this case for both the records same IPs will be returned, so traffic for http://test.example.com ==> Natted to 172.16.1.30 and http://foo.example.com ===? 172.16.1.40

Like

test.example.com IN A 1.1.1.3
IN A 2.2.2.3

foo.example.com IN A 1.1.1.4
IN A 2.2.2.4

1.1.1.3/2.2.2.3:80 ===> Natted to 172.16.1.30:80

1.1.1.4/2.2.2.4:80 ===> Nattd to 172.16.1.40:80

Can I do that way?


#4

Hi,

Below is the settings for DNS in Authoritative DNS server and Peplink Balance:-

Authoritative DNS server for example.com:
test NS wan1balance
test NS wan2balance
foo NS wan1balance
foo NS wan2balance
wan1balance A 1.1.1.1
wan2balance A 2.2.2.2

Peplink Balance:-
example.com
test A 1.1.1.3
test A 2.2.2.3
foo A 1.1.1.4
foo A 2.2.2.4

Below is the NAT (NAT Mapping since you have sufficient public IP) settings in Peplink Balance:-
1.1.1.3 --NAT–> 172.16.1.30
2.2.2.3 --NAT–> 172.16.1.30
1.1.1.4 --NAT–> 172.16.1.40
2.2.2.4 --NAT–> 172.16.1.40

Hope this help.


#5

Hey thanks again for descriptive explaination.

Peplink Balance:-
example.com
test A 1.1.1.3
test A 2.2.2.3
foo A 1.1.1.4
foo A 2.2.2.4

So in this case will I have to create parent domain on peplink balance as well? In this case example.com?

beacause test.example.com A record points to different IPs rather than “@” [or wan1, wan2], what say? else if I create A record under test.example.com; it would be test.test.example.com. So I will have to create it under example.com, right?


#6

Hi,

Please find the link below for the details DNS record setup in Peplink:-