LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: LVS-NAT + 2.4 iptables firewalling

To: Ben <bench@xxxxxxxxxx>
Subject: Re: LVS-NAT + 2.4 iptables firewalling
Cc: Joseph Mack <mack.joseph@xxxxxxx>, <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
From: Julian Anastasov <ja@xxxxxx>
Date: Fri, 21 Jun 2002 01:08:05 +0000 (GMT)
        Hello,

On Thu, 20 Jun 2002, Ben wrote:

> Perhaps it would help if somebody could show me where LVS hooks into these
> iptables flow paths:
>
>
> ...manglePREROUTING --> natPREROUTING...
> ...mangleINPUT --> filterINPUT...
> ...mangleOUTPUT --> natOUTPUT --> filterOUTPUT...
> ...mangleFORWARD --> filterFORWARD...
> ...manglePOSTROUTING --> natPOSTROUTING...
>
>
>
>  I saw a posting in the archive from early last year
> (http://marc.theaimsgroup.com/?l=linux-virtual-server&m=98296653726641&w=2),
> but that doesn't really help me much and I don't know how up to date it is.

        Here is the final version (again very old). Nothing is
changed in Netfilter and LVS, may be NF added mangle to all hooks
recently.

http://www.linuxvirtualserver.org/~julian/LVS.txt

        Everything else is in the sources.

> Hopefully it's somewhat out of date, because from the little I understood it
> seemed to imply that LVS didn't play too well with iptables. Of course, that
> was a year and a half ago....

        Nothing changed. It works for usual setups.

Regards

--
Julian Anastasov <ja@xxxxxx>



<Prev in Thread] Current Thread [Next in Thread>