18 Mar
2019
18 Mar
'19
8:39 p.m.
- We are an island, so our network will be managed as
a "closed" network, with only two gateways to "the rest of the world",
in two data centers located in the two the main cities.
It should be possible to get it working correct in that setup.
The main problems of the German network are:
- the use of many exitpoints towards internet that use consumer lines and NAT
- the reliance on consumer routers that offer no flexibility in routing and connection
marking (AVM Fritzbox etc)
- the separation of different connection technologies in different routing tables
evaluated sequentially instead of from smallest subnetsize up
- (motivated by some of the above points) the naive routing that does not take connections
into account, so it cannot differentiate between outgoing and incoming connections
When you (and it looks like you do) abolish those internet connection points with NAT,
most of the problems are already solved even in cases where the routing is asymmetrical
and not optimal.
At least it works.
Rob