RE: Netfilter connection tracking support for IPVS

To: Nicklas Bondesson <nicklas.bondesson@xxxxxxxxxxxx>
Subject: RE: Netfilter connection tracking support for IPVS
Cc: "' users mailing list.'" <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
From: Julian Anastasov <ja@xxxxxx>
Date: Sat, 24 Feb 2007 00:17:59 +0200 (EET)

On Fri, 23 Feb 2007, Nicklas Bondesson wrote:

> I have sucessfully built the kernel with your original patch (using the old
> Dependent connection tracking way). I am however still unable to SNAT
> traffic leaving the box. I'm runnng the director and firewall on the same
> box.
> This is enabled:
> enable the NFCT support at run time:
> echo 1 > /proc/sys/net/ipv4/vs/conntrack
> enable the SNAT rerouting for IPVS traffic (optional, useful for
> source based routing, in fact, not related to this NFCT support)

        This rerouting is only for IPVS packets

> echo 1 > /proc/sys/net/ipv4/vs/snat_reroute

        Can you clarify how the following rule is related to IPVS?

> And this is how I do SNAT: iptables -t nat -A POSTROUTING -o eth0 -j SNAT
> --to-source
> Any suggestions?

        Is the SNAT rule working without NFCT patch?


Julian Anastasov <ja@xxxxxx>

<Prev in Thread] Current Thread [Next in Thread>