{"id":10709,"date":"2024-02-23T23:24:12","date_gmt":"2024-02-24T04:24:12","guid":{"rendered":"https:\/\/www.rushworth.us\/lisa\/?p=10709"},"modified":"2024-02-23T23:45:16","modified_gmt":"2024-02-24T04:45:16","slug":"fedora-39-load-balancing-across-two-network-connections","status":"publish","type":"post","link":"https:\/\/www.rushworth.us\/lisa\/?p=10709","title":{"rendered":"Fedora 39: Load Balancing Across Two Network Connections"},"content":{"rendered":"

I think this is one of those things that people don’t normally<\/em> do at home, and the folks who configure this in enterprises know what they’re doing and don’t need guidance on how to do basic network things. But … we wanted to have two network cards in our server so high network traffic usage like backups and TV recording don’t create contention. When I was a server admin, I’d set up link aggregation — bonding, teaming — and it just magically worked. We’d put in a port request to get the new port turned up, note it was going to be a teamed interface, do our OS config, and everything was fine. What the network guys did? I had no idea. Well, now I do!<\/p>\n

On the switch — a Cisco 2960-S in this case — you need to create an EtherChannel and assign the ports to that channel. Telnet’ing to the switch, you first need to elevate your privileges as we start with level 1<\/p>\n

wc2906s01>show priv\r\nCurrent privilege level is 1<\/pre>\n
One you’ve entered privilege level 15, go into config term. Create the port-channel interface and assign it a number (I used 1, but 1 through 6 are options). Then go into each interface and add it to the port channel group you just created (again 1) — I set the mode to “on” because I doubt our server is going to negotiate PAgP and I didn’t want to get into setting up LACP.<\/p>\n
enable 15\r\nconfig term\r\n\r\ninterface Port-channel 1\r\n\r\ninterface GigabitEthernet1\/0\/13\r\nchannel-group 1 mode on\r\n\r\ninterface GigabitEthernet1\/0\/14\r\nchannel-group 1 mode on\r\n\r\n# src-mac is the default, can change to something else\r\n# e.g. src-dst-mac would be set using\r\n# port-channel load-balance src-dst-mac\r\nend<\/pre>\n
Done! Using show etherchannel summary<\/tt> confirms that this worked:<\/p>\n
wc2906s01>show etherchannel summary\r\nFlags: D - down P - bundled in port-channel\r\nI - stand-alone s - suspended\r\nH - Hot-standby (LACP only)\r\nR - Layer3 S - Layer2\r\nU - in use f - failed to allocate aggregator\r\n\r\nM - not in use, minimum links not met\r\nu - unsuitable for bundling\r\nw - waiting to be aggregated\r\nd - default port\r\n\r\nNumber of channel-groups in use: 1\r\nNumber of aggregators: 1\r\n\r\nGroup Port-channel Protocol Ports\r\n------+-------------+-----------+-----------------------------------------------\r\n1 Po1(SU) - Gi1\/0\/13(P) Gi1\/0\/14(P)<\/pre>\n
Then<\/em> you can configure a network bond in Fedora and add the physical interfaces. Since we’re using KVM\/QEMU, there is a VMBridge bridge that contains the bond, and the bond joins two physical interfaces named enp10s2 and enp0s25<\/p>\n
# VM Bridge configuration<\/p>\n
[lisa@fedora39 \/etc\/NetworkManager\/system-connections\/]# cat vmbridge.nmconnection
\n[connection]
\nid=vmbridge
\nuuid=b2bca190-827b-4aa4-a4f5-95752525e5e5
\ntype=bridge
\ninterface-name=vmbridge
\nmetered=2
\ntimestamp=1708742580<\/p>\n
[ethernet]<\/p>\n
[bridge]
\nmulticast-snooping=false
\npriority=1
\nstp=false<\/p>\n
[ipv4]
\naddress1=10.1.2.3\/24,10.5.5.1
\ndns=10.1.2.200;10.1.2.199;
\ndns-search=example.com;
\nmay-fail=false
\nmethod=manual<\/p>\n
[ipv6]
\naddr-gen-mode=stable-privacy
\nmethod=disabled<\/p>\n
[proxy]<\/p>\n
 <\/p>\n
# Bond configuration — master is the vmbridge, and the round robin load balancing option is used.
\n[lisa@fedora39 \/etc\/NetworkManager\/system-connections\/]# cat bond0.nmconnection
\n[connection]
\nid=bond0
\nuuid=15556a5e-55c5-4505-a5d5-a5c547b5155b
\ntype=bond
\ninterface-name=bond0
\nmaster=vmbridge
\nmetered=2
\nslave-type=bridge
\ntimestamp=1708742580<\/p>\n
[bond]
\ndowndelay=0
\nmiimon=1
\nmode=balance-rr
\nupdelay=0<\/p>\n
[bridge-port]<\/p>\n
# Finally two network interfaces that are mastered by bond2
\n[lisa@fedora39 \/etc\/NetworkManager\/system-connections\/]# cat enp0s25.nmconnection
\n[connection]
\nid=enp0s25
\nuuid=159535a5-65e5-45f5-a505-a53555958525
\ntype=ethernet
\ninterface-name=enp0s25
\nmaster=bond0
\nmetered=2
\nslave-type=bond
\ntimestamp=1708733538<\/p>\n
[ethernet]
\nauto-negotiate=true
\nmac-address=55:65:D5:15:A5:25
\nwake-on-lan=32768<\/p>\n
[lisa@fedora39 \/etc\/NetworkManager\/system-connections\/]# cat enp10s2.nmconnection
\n[connection]
\nid=enp10s2
\nuuid=158525f5-f5d5-4515-9525-55e515c585b5
\ntype=ethernet
\ninterface-name=enp10s2
\nmaster=bond0
\nmetered=2
\nslave-type=bond
\ntimestamp=1708733538<\/p>\n
[ethernet]
\nauto-negotiate=true
\nmac-address=55:35:25:D5:45:B5
\nwake-on-lan=32768<\/p>\n
 <\/p>\n
Restart NetworkManager to bring everything online. Voila — two network interfaces joined together and connected to the switch. Check out the bond file under \/proc\/net\/bonding to verify this<\/em> side is working.<\/p>\n
[lisa@fedora39 ~\/]# cat \/proc\/net\/bonding\/bond0
\nEthernet Channel Bonding Driver: v6.7.5-200.fc39.x86_64<\/p>\n
Bonding Mode: load balancing (round-robin)
\nMII Status: up
\nMII Polling Interval (ms): 1
\nUp Delay (ms): 0
\nDown Delay (ms): 0
\nPeer Notification Delay (ms): 0<\/p>\n
Slave Interface: enp0s25
\nMII Status: up
\nSpeed: 1000 Mbps
\nDuplex: full
\nLink Failure Count: 2
\nPermanent HW addr: 55:65:d5:15:a5:25
\nSlave queue ID: 0<\/p>\n
Slave Interface: enp10s2
\nMII Status: up
\nSpeed: 1000 Mbps
\nDuplex: full
\nLink Failure Count: 0
\nPermanent HW addr: 55:35:35:d5:45:b5
\nSlave queue ID: 0<\/p>\n","protected":false},"excerpt":{"rendered":"
I think this is one of those things that people don’t normally do at home, and the folks who configure this in enterprises know what they’re doing and don’t need guidance on how to do basic network things. But … we wanted to have two network cards in our server so high network traffic usage …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[30],"tags":[1980,1706,1979,47,1978,1982,1195,1981],"class_list":["post-10709","post","type-post","status-publish","format-standard","hentry","category-system-administration","tag-bond","tag-cisco","tag-cisco-ios","tag-fedora","tag-ios","tag-link-aggregation","tag-redhat","tag-team"],"_links":{"self":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts\/10709","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=10709"}],"version-history":[{"count":3,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts\/10709\/revisions"}],"predecessor-version":[{"id":10713,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts\/10709\/revisions\/10713"}],"wp:attachment":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=10709"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=10709"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=10709"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}