Friday, February 15, 2019

ISO ip-sla on linux, or something with a similar result

What I'm looking for is a tool that runs on vanilla linux that would act a lot like ip-sla and adjust a route on configurable link failure conditions.

The goal is to have a client device establish a connection with a cloud host (server), start up a stream of data from the cloud host to the client and monitor that for interruptions and re-connection. Adjust a route accordingly.

I'm wanting to build a rapid recovery VPN toolkit around wireguard and tinyfecvpn.

ie, 2 WANs, primary is 'cable' and secondary is 'lte'. ip-sla monitor over the 'cable' connection and if that has a ~300ms gap in packets, immediately switch the route to the remote vpn from 'cable' to 'lte'. Wireguard handles the rapid and graceful transition between WAN hosts because it's awesome. tinyfecvpn runs over wireguard specifically to add ~100ms worth of forward error correction so that no packets are lost in the transition.

when the 'cable' connection stabilizes, for example has 5 seconds of uninterupted packets, then change the route back. Wireguard will forward the next packet to the src address of the last one, so it's very fast at adapting. And tinyfecvpn will reconstruct lost packets.

I've worked with cradlepoint and peplink but their tech is heavy on cellular data just maintaining the 'bulletproof' VPN connection. That means a lot of cost. This solution would have minimal overhead and rapid recovery to the primary WAN.

Thoughts?



No comments:

Post a Comment