Re: moving ipvs() to POST/PREROUTING

To: Jason Stubbs <j.stubbs@xxxxxxxxxxxxxxx>
Subject: Re: moving ipvs() to POST/PREROUTING
Cc: LVS Devel <lvs-devel@xxxxxxxxxxxxxxx>
From: Joseph Mack NA3T <jmack@xxxxxxxx>
Date: Fri, 11 Apr 2008 05:37:03 -0700 (PDT)
On Fri, 11 Apr 2008, Jason Stubbs wrote:

With local node, doesn't work but an IP address on a local interface

that will do.

Local node isn't real important. It was there because it could be done, rather than because it was needed. If you can do it, we'll take it, but otherwise don't worry a whole lot about it.

LVS-TUN should work as LVS-DR didn't require any direct modification, but it's a little bit of a pain to set up for testing at this stage.

have the same physical setup as LVS-DR and just change the if on the realservers to tunl0 and change the appropriated ipvsadm lines.

Is there any problem with essentially hiding the real servers from netfilter?

I don't know what this means (I didn't know that netfilter knew about the realservers).

Will your setup handle the F5-SNAT situation?


Joseph Mack NA3T EME(B,D), FM05lw North Carolina
jmack (at) wm7d (dot) net - azimuthal equidistant map
generator at
Homepage It's GNU/Linux!
To unsubscribe from this list: send the line "unsubscribe lvs-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at

<Prev in Thread] Current Thread [Next in Thread>