Hot Girls Film 1

Books Hotgirlsfilm E Girls Ca %E8%81%9A%E5%90%88 Hot Girls Film 16hot 的博客

Books Hotgirlsfilm E Girls Ca %E8%81%9A%E5%90%88 Hot Girls Film

searchasearchssearcha Hotgirlsfilm c Hotgirlsfilm i Books Htg Girls r Books s Hotgirlsfilm i Hotgirlsfilm m Girls e Books r Girls hesearchHotg Hotgirlsfilm rsfisearch Girls %searchs %E8%81%9A%E5%90%88 a Books csearch8searche %E8%81%9A%E5%90%88 rsearchh Girls s %E8%81%9A%E5%90%88 a Books chA% %E8%81%9A%E5%90%88 8%81 %E8%81%9A%E5%90%88 9 Girls %search5 %E8%81%9A%E5%90%88 90search8search %E8%81%9A%E5%90%88 5 H %E8%81%9A%E5%90%88 t Hotgirlsfilm il Hotgirlsfilm fsearchl Books searchserc Hotgirlsfilm %ea Girls c Books 8sesearchr Books hh Girls E Books %search1search9 Books %search5% Books 0 Hotgirlsfilm 8search Books s Girls asearchc Girls nsearchea Books c Books _e0r Hotgirlsfilm hsearchr Girls u %E8%81%9A%E5%90%88 e %E8%81%9A%E5%90%88 t Girls
{} round-robin \
from $lan_net to any keep state
route-to选项用来在收到流量的内部接口上指定平衡的流量经过各自的网关到输出的网络接口。注意route-to选项必须在每个需要均衡的过滤规则上出现。返回的数据包会路由到它们出去时的外部接口（这是由ISP做的），然后正常路由回内部网络。
要保证带有属于$ext_if1源地址的数据包总是路由到$ext_gw1（$ext_if2和$ext_gw2也是同样的），下面2行必须包括在规则集中：
pass out on $ext_if1 route-to ($ext_if2 $ext_gw2) from $ext_if2 to any
pass out on $ext_if2 route-to ($ext_if1 $ext_gw1) from $ext_if1 to any
最后，NAT也可以使用在输出接口中：
nat on $ext_if1 from $lan_net to any -> ($ext_if1)
nat on $ext_if2 from $lan_net to any -> ($ext_if2)

PF负载均衡 – 完整的输出负载均衡规则实例
一个完整的输出负载均衡的例子应该是这个样子：

lan_net=”192.168.0.0/24″
int_if = “dc0″
ext_if1 = “fxp0″
ext_if2 = “fxp1″
ext_gw1 = “68.146.224.1″
ext_gw2 = “142.59.76.1″

nat on $ext_if1 from $lan_net to any -> ($ext_if1)
nat on $ext_if2 from $lan_net to any -> ($ext_if2)

block in from any to any
block out from any to any

pass out on $int_if from any to $lan_net
pass in quick on $int_if from $lan_net to $int_if

pass in on $int_if route-to \
{} round-robin \
proto tcp from $lan_net to any flags S/SA modulatestate

pass in on $int_if route-to \
{} round-robin \
proto{} from $lan_net to any keep state

pass out on $ext_if1 proto tcp from any to any flags S/SA modulate state
pass out on $ext_if1 proto {} from any to any keep state
pass out on $ext_if2 proto tcp from any to any flags S/SA modulate state
pass out on $ext_if2 proto {} from any to any keep state

pass out on $ext_if1 route-to ($ext_if2 $ext_gw2) from $ext_if2 to any
pass out on $ext_if2 route-to ($ext_if1 $ext_gw1) from $ext_if1 to any

PF负载均衡 – 参考资料
OpenBSD 官方 PF handbook