Re: a question about fullnat mode for ipvs

To: "longguang.yue" <bigclouds@xxxxxxx>
Subject: Re: a question about fullnat mode for ipvs
Cc: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>, Simon Horman <horms@xxxxxxxxxxxx>, lvs-devel@xxxxxxxxxxxxxxx, yuelongguang@xxxxxxxxx
From: Julian Anastasov <ja@xxxxxx>
Date: Mon, 26 Oct 2020 22:23:42 +0200 (EET)

On Tue, 20 Oct 2020, longguang.yue wrote:

> Hi,all:
>     fullnat mode refers to  incoming packet's src:port and dst:port pairs are 
> both changed at the same
> time, vice  versa for outgoing packets.
>     fullnat has existed for many years since 2009, why which is not in kernel.

        Not sure. What I see now is that it adds some complexity
to the code. Open questions are about integration with netfilter
conntracks (when conntrack=1), in the sync protocol, etc.

>     introduction for fullnat    
> could we port or re-implement it in upstream?

        May be I don't fully understand the goals but
is it worth it?


Julian Anastasov <ja@xxxxxx>
<Prev in Thread] Current Thread [Next in Thread>