https://bng.inlab.net/ Recent content in BalanceNG on BalanceNG V7 Development Release Hugo -- gohugo.io https://bng.inlab.net/reference/appendices/parameters/ Mon, 01 Jan 0001 00:00:00 +0000 https://bng.inlab.net/reference/appendices/parameters/ BalanceNG Parameters # The show parameters command includes a description and a “default value changed” column where a * indicates a change. bng-MASTER# sh parameters name min max default current c description ----------------- ---- ------- ------- ------- - ---------------------------------------------------------------- arplookup 5 60 10 10 initial ARP/ND6 interval for unknown addresses arprefresh 5 3600 300 300 ARP/ND6 refresh interval for known addresses arptimeout 0 86400 0 0 ARP/ND6 target timeout (0 = disabled) backupalerts 0 1 1 1 run alert notification scripts in backup state bngsyncport 1024 49151 10439 10439 bngsync port debugscope 0 9 0 0 extra logging, see "show debugscopes" eventinterval 10 600 10 10 event interval for rate computation ephemeralstart 1024 49152 49152 49152 start of ephemeral port range gratarpremind 0 120 0 0 send gratuitous ARP/unsolicited NA reminders (minutes, 0=off) hashbytes4 1 4 4 4 IPv4 source address bytes for method hash hashbytes6 1 16 16 16 IPv6 source address bytes for method hash hcportoffset 1024 65535 30000 30000 health check port offset ipforwarding 0 1 0 1 * enable packet forwarding (RNAT and routing) lognewsess 0 1 0 0 log new session table entries maxsyncps 0 10000 0 0 maximum number of ST syncs per second (0=unlimited) noftupdate 0 1 0 0 1=no forwarding table updates psvrelearn 0 1 0 0 passive relearning of ARP/ND6 (default=off) pthreadstacksize 0 1000000 204800 204800 set pthread stacksize, 0=default rnatflowinterval 60 86400 60 60 interval to check for rnat flow expiry rnatflowmaxage 60 3600 300 300 maximum age of rnat flows sendprobes 0 1 0 0 send ARP/ND6 probes for own VIPs sessionautoresync 0 1 1 1 1=autoresync active, 0=autoresync off sessionarrtimeout 0 3600 60 60 session autoresync request timeout sessiongclimit 1000 500000 100000 100000 session gc limit for outdated sessions sessiondlimit 10 10000 10 10 session table display limit (show sessions) sessionscan 1 20 10 10 scan for outdated sessions (MASTER) sessionscanbup 1 1000 100 100 scan for outdated sessions (BACKUP) sessionsync 0 1 1 1 1=enable session table synchronisation sessionsyncack 0 1 1 1 1=send session table sync acks sessionsynciv 10 120 10 10 sync interval for active ST entries sessiontimeout 10 172800 600 600 timeout for unused ST entries sweeponreload 0 1 1 1 sweep session table after reload syncackbdelay 1 60 10 10 initial delay after a backup requests ST sync syncackmaxps 1 10000 2000 2000 maximum syncs per second syncackresend 1 60 5 5 resend sync after N seconds syncackwsize 1 10000 100 100 window size for session table sync/ack stickytarget 0 1 1 1 stick target MAC address to interface seen first strictrouting 0 1 1 1 accept only packets to BNG represented addresses taparpreprx 0 10 0 0 send ARP replies received on if to tap queue (0=off) taparpreptx 0 10 0 0 send ARP replies sent to if to tap queue (0=off) taparpreqrx 0 10 0 0 send ARP requests received on if to tap queue (0=off) taparpreqtx 0 10 0 0 send ARP requests sent to if to tap queue (0=off) tapnarx 0 10 0 0 send neighbor advertisements received on if to tap queue (0=off) tapnatx 0 10 0 0 send neighbor advertisements sent to if to tap queue (0=off) tapnsrx 0 10 0 0 send neighbor solicitations received on if to tap queue (0=off) tapnstx 0 10 0 0 send neighbor solicitations sent to if to tap queue (0=off) taprarx 0 10 0 1 * send router advertisements received on if to tap queue (0=off) tapratx 0 10 0 0 send router advertisements sent to if to tap queue (0=off) taprsrx 0 10 0 0 send router solicitations received on if to tap queue (0=off) taprstx 0 10 0 0 send router solicitations sent to if to tap queue (0=off) taprx 0 10 0 0 send everything received on if to tap queue (0=off) taptx 0 10 0 0 send everything sent from if to tap queue (0=off) tarpitrealto 60 86400 14400 14400 tarpit real ip address timeout tarpittrapto 60 86400 600 600 tarpit trap ip address timeout tcphalfopen 0 1 1 1 allow TCP halfopen on tcpopen health check (1=yes) vrrpmasterdown 3 10 3 3 seconds to declare master as down vrrppreempt 0 1 0 0 enable VRRP preemption vrrppreemptts 0 100 0 0 set VRRP preemption threshold vrrpv3ip 4 6 5 5 vrrp version 3 IP transport (5 = automatic) vrrpversion 2 3 3 3 VRRP version bng-MASTER# https://bng.inlab.net/download/ Mon, 01 Jan 0001 00:00:00 +0000 https://bng.inlab.net/download/ Download # BalanceNG-7.517-Debian13-amd64.deb       Yes, I agree to the BalanceNG End User License Agreement   Please subscribe me to the Inlab Networks newsletter   https://bng.inlab.net/reference/general-usage/installation/ Mon, 01 Jan 0001 00:00:00 +0000 https://bng.inlab.net/reference/general-usage/installation/ Installation+Deinstallation # Debian-Style (.deb) # Installation and Update # $ sudo apt install ./BalanceNG-7.517-Debian13-amd64.deb ... Package Information # $ sudo dpgk -l | egrep BalanceNG ii balanceng 7.517 amd64 BalanceNG - Inlab Networks Load Balancer $ Deinstallation # $ dpkg -r BalanceNG ... $ RHEL-Style (.rpm) # Installation # $ sudo dnf install ./BalanceNG-7.517-RHEL9-1.x86_64.rpm ... $ Update # $ sudo dnf update . https://bng.inlab.net/reference/appendices/bngsync/ Mon, 01 Jan 0001 00:00:00 +0000 https://bng.inlab.net/reference/appendices/bngsync/ The bngsync Protocol # The bngsync UDP protocol may use either IPv4 or IPv6 as transport protocol and uses the registered UDP port 10439 (bngsync) per default. The general bngsync UDP protocol message format is as follows: Byte Offset Description Value 0 bngsync protocol tag 0xFF 1 bngsync protocol version 1 0x01 2 virtual router ID (VRID) variable 3 virtual router priority variable 4 message type variable 5 message subtype variable 6 data length high byte variable 7 data length low byte variable 8 data start . https://bng.inlab.net/reference/general-usage/the-bng-binary/ Mon, 01 Jan 0001 00:00:00 +0000 https://bng.inlab.net/reference/general-usage/the-bng-binary/ The bng Binary # Usage # $ sudo bng This is BalanceNG 7.517 Debian13-amd64 (2026/07/21) Copyright (C) 2005-2025,2026 by Inlab Networks GmbH, Germany. All rights reserved / Alle Rechte vorbehalten. further information: bng.inlab.net usage: bng [-df] start|stop|restart|status|control [instance] $ Options # Option Description Example -N show nodeid $ sudo bng -N -V show vnodeid $ sudo bng -V -I list instances and status $ sudo bng -I -M show instance MAC address $ sudo bng -i 1 -M -d enable debug mode $ sudo bng -d start -f stay in foreground $ sudo bng -df start https://bng.inlab.net/reference/general-usage/the-bngtap-binary/ Mon, 01 Jan 0001 00:00:00 +0000 https://bng.inlab.net/reference/general-usage/the-bngtap-binary/ The bngtap Binary # Usage # usage: bngtap [options] output.pcap options: -b|--blimit <n> specify a byte limit -p|--plimit <n> specify a packet limit -i|--instance <i> set bng instance (default 0) -n|--noreset do not empty queue on startup -s|--silent silent mode -h|--help show usage -v|--version show version -c|--copyright show copyright Examples # Collecting packets to a file # $ sudo bngtap /tmp/example.pcap ... Piping to tcpdump # $ sudo bngtap -s - | tcpdump -r - . https://bng.inlab.net/reference/appendices/ipflowporthash/ Mon, 01 Jan 0001 00:00:00 +0000 https://bng.inlab.net/reference/appendices/ipflowporthash/ IPFlowPortHash() # Ephemeral ports within the rnat module are selected with the IPFlowPortHash() function which is an application of the f2568() tabular hashing function. Per default it returns an ephermeral port within the ephemeral port range 49152-65535 (RFC 6335 and IANA), where the lower bound may be modified with the ephemeralstart parameter when needed. Selecting an ephemeral port with IPFlowPortHash() makes the synchronization of NAT states between VRRP master and backup unnecessary. https://bng.inlab.net/keyfactory/ Mon, 01 Jan 0001 00:00:00 +0000 https://bng.inlab.net/keyfactory/ BalanceNG License Keyfactory # Please enter your license credentials below. You may either license the NodeID or the VNodeID of your machine (the VNodeID is more suitable when running BalanceNG on a virtual machine that may be moved). The returned license key (md5 hash) is valid only if all credentials are correct. In case of any questions or problems contact us: support@inlab.net https://bng.inlab.net/widerrufsrecht/ Mon, 01 Jan 0001 00:00:00 +0000 https://bng.inlab.net/widerrufsrecht/ Widerrufsbelehrung # Verbraucher im Sinne des §13 BGB können ihre Vertragserklärung bei Fernabsatzverträgen innerhalb von zwei Wochen ohne Angabe von Gründen schriftlich (z.B. Brief, Fax, Email) oder durch Rücksendung der Sache widerrufen. Die Frist beginnt frühestens mit Erhalt dieser Belehrung. Zur Wahrung der Widerrufsfrist genügt die rechtzeitige Absendung des Widerrufs oder der Sache. Der Widerruf ist zu richten an: # Inlab Networks GmbH Vermerk “Widerruf” Josef-Würth-Str. 3-5 82031 Grünwald https://bng.inlab.net/datenschutz/ Mon, 01 Jan 0001 00:00:00 +0000 https://bng.inlab.net/datenschutz/ Datenschutz # Wir als Betreiber dieser Seiten nehmen den Schutz Ihrer persönlichen Daten sehr ernst. Wir behandeln Ihre personenbezogenen Daten vertraulich und entsprechend der gesetzlichen Datenschutzvorschriften sowie dieser Datenschutzerklärung. Die Nutzung unserer Webseite ist ohne Angabe personenbezogener Daten möglich (und extra dafür ausgelegt). Soweit auf unseren Seiten personenbezogene Daten (beispielsweise Name, Anschrift oder E-Mail-Adressen) erhoben werden, erfolgt dies stets auf freiwilliger Basis. Diese Daten werden ohne Ihre ausdrückliche Zustimmung nicht an Dritte weitergegeben. https://bng.inlab.net/contact/ Mon, 01 Jan 0001 00:00:00 +0000 https://bng.inlab.net/contact/ Contact # Inlab Networks GmbH Josef-Würth-Str. 3-5 82031 Grünwald Tel: +49 89 64911420 Fax.: +49 89 64911421 Email: info@inlab.net https://bng.inlab.net/impressum/ Mon, 01 Jan 0001 00:00:00 +0000 https://bng.inlab.net/impressum/ Imprint/Impressum # Inlab Networks GmbH Josef-Würth-Str. 3-5 82031 Grünwald Tel: +49 89 64911420 Fax.: +49 89 64911421 Email: info@inlab.net Vertretungsberechtigter Geschäftsführer: Thomas G. Obermair Registergericht: Amtsgericht München HRB 94795 Umsatzsteuer-Identifikationsnummer: DE 129385119 EORI-Nummer: DE412384937758978 D&B D-U-N-S® number: 329750814 CAGE/NCAGE code: CB955 IRS EIN: 98-0642741 Inhaltlich Verantwortlicher gemäß §6 MDStV: Thomas G. Obermair Haftungshinweis: Trotz sorgfältiger inhaltlicher Kontrolle übernehmen wir keine Haftung für die Inhalte externer Links. Für den Inhalt der verlinkten Seiten sind ausschließlich deren Betreiber verantwortlich. https://bng.inlab.net/privacy-policy/ Mon, 01 Jan 0001 00:00:00 +0000 https://bng.inlab.net/privacy-policy/ General # Your privacy is very important to us. At Inlab Networks we have a few fundamental principles that we follow: We don’t ask you for personal information unless we truly need it. We don’t share your personal information with anyone except to comply with the law, develop our products, or protect our rights. We don’t store personal information on our servers unless required for the on-going operation of our site. https://bng.inlab.net/reference/appendices/thirdparty/ Mon, 01 Jan 0001 00:00:00 +0000 https://bng.inlab.net/reference/appendices/thirdparty/ LDNS (DNS Library) # BalanceNG may be statically linked to the LDNS DNS library (available at the following URL: http://www.nlnetlabs.nl/ldns/ ). The LDNS DNS library copyright notice is as follows: Copyright (c) 2005,2006, NLnetLabs All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. https://bng.inlab.net/eula/ Mon, 01 Jan 0001 00:00:00 +0000 https://bng.inlab.net/eula/ End User License Agreement for BalanceNG ======================================== $Revision: 1.12 $ $Date: 2026/06/23 17:18:52 $ 1. General This End-User License Agreement ("EULA") is a legal agreement between you and Inlab Networks GmbH for the Inlab Networks GmbH products identified above, which may include computer software and associated media, electronic documentation and printed materials ("The Software"). By installing, copying, distributing or otherwise using The Software you agree to be bound by the terms of this EULA. https://bng.inlab.net/examples/ipsec-nat-t/ Mon, 01 Jan 0001 00:00:00 +0000 https://bng.inlab.net/examples/ipsec-nat-t/ IPsec/NAT-T Load Balancing with RNAT # General Properties # This example shows how to load-balance IPsec/NAT-T traffic (IPv4 UDP port 4500) while providing outbound connectivity for the target servers with RNAT. Specifying the same VRRP priority 254 leaves the mastership unspecified. This in turn allows the backup to relearn the session table contents with the bngsync protocol. VRRP and bngsync are going both over interface 2, both nodes need to reference each other as usual (differences are shown in bold). https://bng.inlab.net/reference/general-usage/licensing/ Mon, 01 Jan 0001 00:00:00 +0000 https://bng.inlab.net/reference/general-usage/licensing/ Licensing # Trial License # BalanceNG comes with a 30 day full functionality trial license. The trial license restrictions for BalanceNG are as follows: The trial license is valid for 30 days and within a 3 month window after day of build of the BalanceNG package (whichever expires first). Instances need to be restarted after 7 days of continuous operation (e.g. by executing bng restart). https://bng.inlab.net/pricing/ Mon, 01 Jan 0001 00:00:00 +0000 https://bng.inlab.net/pricing/ Pricing and Support Plans # BNGFNL Full Node License # Full permanent License for one single node. Full number of virtual servers and targets per instance (512/1024). Includes one year of BalanceNG Standard Support Plan (BNGSUP). 2 BNGFNL are required for a dual node VRRP/HA setup. BNGSUP One Year Standard Software Support Plan # Standard best effort email support package for up to 2 BalanceNG Licenses.