Greetings.
I have what might be a rather strange question, but please bear with me.
I am planning to build a dual-network setup. I have a number of workstations and a mess of servers, and I want them to be able to communicate with each other on a "private" Gigabit network, and with the Internet on a "public" 10/100 network (since local ISP's tops out at a theoretical 14Mb/s, a 100Mbps network is quite adequate).
One of the reasons for this is that I want my servers "segregated" on their own Internet-facing connection, but fully connected with my workstations. That way, the Internet connection for my servers can have its own dual gateway setup, making use of three OpenBSD gateway/dns servers for load balancing between a dedicated cable modem and ADSL modem. My workstations will be on their own ADSL modem so that their traffic *cough*bittorrent*cough* doesn't foul my server's bandwidth.
My main question is how I engineer this so that any *internet* request that any computer makes is preferentially sent out via the 10/100 network, but that any *network* resource request (such as access to my 10TB Raid6 NAS) makes use of the private gigabit network. I have some rough ideas, but I really don't want to re-invent the wheel.
The key point is that I want to make any and all communication strictly segregated, preferably O/S agnostic and implemented on the network itself. TCP/IP, POP3, SMTP, IMAP and BitTorrent/Gnutella traffic goes out exclusively via the 10/100 network, and FTP/private networked drive sharing goes via the Gigabit network.
As well, I would like to have the 10/100 network machine-segregated as well. That is, the only thing visible on the 10/100 network to any one machine should be the gateway. In order to see another machine (even if it is on the same 10/100 network) the Gigabit network would need to be used. Other machines should not even be pingable on the 10/100 network. To all intents, a machine on the 10/100 network should not exist to any other computer on that network, no matter what the protocol.
Suggestions?
I have what might be a rather strange question, but please bear with me.
I am planning to build a dual-network setup. I have a number of workstations and a mess of servers, and I want them to be able to communicate with each other on a "private" Gigabit network, and with the Internet on a "public" 10/100 network (since local ISP's tops out at a theoretical 14Mb/s, a 100Mbps network is quite adequate).
One of the reasons for this is that I want my servers "segregated" on their own Internet-facing connection, but fully connected with my workstations. That way, the Internet connection for my servers can have its own dual gateway setup, making use of three OpenBSD gateway/dns servers for load balancing between a dedicated cable modem and ADSL modem. My workstations will be on their own ADSL modem so that their traffic *cough*bittorrent*cough* doesn't foul my server's bandwidth.
My main question is how I engineer this so that any *internet* request that any computer makes is preferentially sent out via the 10/100 network, but that any *network* resource request (such as access to my 10TB Raid6 NAS) makes use of the private gigabit network. I have some rough ideas, but I really don't want to re-invent the wheel.
The key point is that I want to make any and all communication strictly segregated, preferably O/S agnostic and implemented on the network itself. TCP/IP, POP3, SMTP, IMAP and BitTorrent/Gnutella traffic goes out exclusively via the 10/100 network, and FTP/private networked drive sharing goes via the Gigabit network.
As well, I would like to have the 10/100 network machine-segregated as well. That is, the only thing visible on the 10/100 network to any one machine should be the gateway. In order to see another machine (even if it is on the same 10/100 network) the Gigabit network would need to be used. Other machines should not even be pingable on the 10/100 network. To all intents, a machine on the 10/100 network should not exist to any other computer on that network, no matter what the protocol.
Suggestions?