Hi All

I have been trying to resolve slow internet at a client. My first suspect was squid was causing issues. I think the issue is on the routing side.

The server has 3 Network cards.
Eth0 - ISP1
Eth1 - LAN
Eth2 - ISP2

if I do a route -n command, the gateway of ISP2 is not listed. ETH2 has an address 41.160.170.216 listed as destination, Gateway is 0.0.0.0. Flag is u. That IP address is not the Default Gateway for the ISP, so I am not sure where that address is coming from.

When I do a jnettop to monitor traffic, dns and email is going through eth0, http and https traffic is going through eth2.

If i run ip route show, I get the following output

default
nexthop via 196.36.143.185 dev eth0 weight 1
nexthop via 41.160.190.217 dev eth2 weight 10
41.160.190.216/29 dev eth2 proto kernel scope link src 41.160.190.219
127.0.0.0/8 dev lo scope host
127.0.0.0/8 via 127.0.0.1 dev lo
168.210.2.2 via 196.36.143.185 dev eth0
192.168.15.0/24 dev eth1 proto kernel scope link src 192.168.15.254
196.36.143.176/28 dev eth0 proto kernel scope link src 196.36.143.186


Thanks in advance for any advice.

Hi All

After some more reading, and checking with the person who installed the server the routing is looking good. I suspect P2P is what is causing issues on my internet connection. If anybody has any advice of what can be used to block p2p traffic on an exsisting Gentoo Box that would be a great help.

It turned out to be a faulty adsl line. That got fixed today and internet speeds where how they should be. I do need to do some tweaking to the routing. DNS seems to be resolving through eth0, and web browsing through eth2. With the instability of the adsl line on eth0 having been fixed and browsing now working how it should be I suspect its routing or the mangle rules.