On Mon, Jan 14, 2008 at 01:42:00AM -0800, Joseph Mack NA3T wrote:
> On Mon, 14 Jan 2008, Raphael Vallazza wrote:
>
>> I think this has nothing to with the input method,
>
> I'd assumed that it would be fixed by hooking the FORWARD chain because
> then the packets wouldn't bypass netfilter.
>
>> it's more a problem of the *xmit* function. Packets for realservers
>> don't seem to flow through the SNAT chain, this way it's not possible
>> to change the source IP.
>
> OK
>
>> This could probably be implemented either by letting the packets flow
>> through the iptables/SNAT (it seems that the patch on
>> http://www.austintek.com/LVS/LVS-HOWTO/HOWTO/LVS-HOWTO.non-modified_realservers.html
>>
>> does this),
>
> can this be put into the standard ipvs?
In principle yes, though I am a bit wary about what
side-effects it might have.
>> or to implement SNAT in the IPVS/NAT method.
>
> can you do either of these?
--
Horms
-
To unsubscribe from this list: send the line "unsubscribe lvs-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
|