How to Setup Failover and Load Balancing in PFSense

Failover is a type of backup operational mode in which the operations of a system components such as network are assumed by secondary system, only when the Primary system becomes unavailable due to system failure or any scheduled down times.

Setup Failover Load Balancer in PFSense
Setup Failover Load Balancer in PFSense

In this setup, we will see how to setup Failover and Load balancing to enable PFSense to load balance traffic from your LAN network to multiple WAN’s (here we’ve used two WAN connections, WAN1 and WAN2).

For example, If in-case, one of your WAN connection went offline due to some network connectivity issues, in this case your second WAN will be automatically shifted from WAN1 to WAN2 by pinging one of your system IP, if there isn’t any reply from system, it will automatically shift from WAN1 to WAN2 or vice-versa.

Load Balancer will combine our both WAN connections to become one powerful internet connectivity. For example, if you’ve 2MB connection for WAN1 and 2MB for WAN2, it will combine both into one with 4MB to stabilize the network connection speed.

To setup Failover Load Balancer, we need at least three Ethernet cards with minimum 100MB/1GB as follows. The first NIC is used for LAN with static IP and other two with DHCP.

My Environment Setup
IP Address LAN	:	192.168.1.1/24	
IP Address WAN1	:	From DHCP
IP Address WAN2	:	From DHCP

Before proceeding further, you must have a working PFSense installation, to know more on how to install pfsense, go through the following article.

  1. How to Install and Configure PFSense

Step 1: Configuring Network Interface

1. After installing PFSense, you will presented with the following screen with available interfaces to configure the network.

Configure Pfsense Interfaces
Configure Pfsense Interfaces

2. Choose 1st interface em0 as WAN1, IP will be assigned from DHCP, second interface will be em2 for LAN and add one more interface em01 (optional), this will be later changed to WAN2 with DHCP IP address. Here is the final interfaces assigned as follows.

Configure Network Interfaces
Configure Network Interfaces
Configured Networks
Configured Networks

3. After configuring network interfaces, login into Pfsense dashboard at the following location and configure LoadBalancer.

https://192.168.1.1

4. After login into GUI, there you can see only WAN, LAN under the interface widgets as shown below.

Configured Interfaces
Configured Interfaces

5. To configure Interface choose “Interface” from the TOP menu and click on WAN to add the description to WAN1, then click on Save to make changes.

Configure WAN1 Interface
Configure WAN1 Interface

Again click on Interface and choose OPT1 and enable the interface to change description from OPT1 to WAN2.

Enable OPT1 Interface
Enable OPT1 Interface

Next, choose DHCP for IPv4 configuration type, or else choose IPv6 and configuration type as DHCP 6.

Configure WAN2 Interface
Configure WAN2 Interface

6. From the bottom of WAN2 page under Private networks, untick Block Private networks to unblock traffic from local networks, and block bogon networks. Save the changes by clicking on Save.

Configure Private Networks WAN2
Configure Private Networks WAN2

After making above changes, it will ask you to apply changes in the top of page, Click to confirm the changes.

Confirm WAN2 Changes
Confirm WAN2 Changes

Now you will get three interfaces in ‘Interface‘ widget in the Dashboard.

Confirm Interfaces
Confirm Interfaces

So, here we’ve configured 2 WAN for our pfsense. Now let us see how to configure our LoadBalancer for these configured WAN’s.

Step 2: Configuring Monitor IP

7. Before configuring Load Balance for pfsense, we need to configure a monitor IP for Load Balancer. Navigate to ‘System‘ menu in top and choose “Routing“.

System Gateways
System Gateways

8. In the ‘Edit gateway‘ page, enter the IP address of monitor IP for both WAN1 and WAN2. In WAN1 I’m going to use my ISP DNS server IP 218.248.233.1. In WAN2 going to use Google public DNS 8.8.8.8.

Configure Monitor IP
Configure Monitor IP

9. After adding Monitor IP, click on Advanced and give a low value for DOWN, here I’m using 3 seconds to monitor the IP. Default will be 10 Seconds.

Monitor IP Failover
Monitor IP Failover

Use same settings for WAN2. Here I have used Google DNS instead of using my ISP DNS. Click save to exit.

Configured System Gateways
Configured System Gateways

Click on Apply changes to make the changes permanent.

Confirm Gateways Settings
Confirm Gateways Settings
If you liked this article, then do subscribe to email alerts for Linux tutorials. If you have any questions or doubts? do ask for help in the comments section.

If You Appreciate What We Do Here On TecMint, You Should Consider:

TecMint is the fastest growing and most trusted community site for any kind of Linux Articles, Guides and Books on the web. Millions of people visit TecMint! to search or browse the thousands of published articles available FREELY to all.

If you like what you are reading, please consider buying us a coffee ( or 2 ) as a token of appreciation.

Support Us

We are thankful for your never ending support.

41 thoughts on “How to Setup Failover and Load Balancing in PFSense”

  1. I configured pfSense as described but found it does not work as documented (or at least as I interpreted it). In step 19 the rule with the TechmintADSL gateway will be valid for all IPv4 traffic and all IPv4 will be load balanced.

    The 2 rules with WAN1Failover and WAN2Failover as gateways will never be used since all traffic match the rule higher in the list. This is exactly what my configuration was doing.

    You would either have to limit the traffic for each rule so that they cover specific traffic that doesn’t overlap with another rule below it. In other words, you might have a rule with WAN1Failover that matches http/https traffic and another rule for TechmintADSL that matched anything to send everything else via load balancing.

    Reply
  2. Hello ! please i have a question how i can test the 2 WANs by putting one of them up or down
    i don’t know how to test it

    Reply
  3. I did exactly as in guide, but performance is horrible. With dual WAN my overall speed is same as one WAN.
    Tested with 5 clients connected to pfsense doing various different transfers over the internet.
    Please write how to fix this.

    Reply
  4. Hello I did these instructions and it was successfully been worked with the process but the problem is the traffic shaper or limiter is not working properly I set up some 2 mpbs in and out but the result in speed test is now with the given speed. how should i fix this?
    thank you in advance

    Reply

Got something to say? Join the discussion.

Have a question or suggestion? Please leave a comment to start the discussion. Please keep in mind that all comments are moderated and your email address will NOT be published.

This site uses Akismet to reduce spam. Learn how your comment data is processed.