|
>>>>> "Lars" == Lars Marowsky-Bree <lmb@xxxxxxx> writes:
Lars> The new fw-mark stuff should bypass this problem too, no?
I don't see how. The problem is the director's handling of packets
from the realserver that have source addresses the director thinks it
owns. That doesn't go away just because you're performing finer grade
load-balancing on incoming packets (packets travelling outside source
-> director -> realserver).
Remember, this issue only ever occurs when doing IP-DR with the
director as a gateway for the realserver. Whether you should just
suffer through the additional overhead of NAT in such a situation is
left as an exercise for the reader. :)
--
Stephen
"Good idea, O Lord!"... "'Course it's a good idea!"
|
