LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: doing both NAT and DR, I need help.

To: tc lewis <tcl@xxxxxxxxx>
Subject: Re: doing both NAT and DR, I need help.
Cc: Jeremy Hansen <jeremy@xxxxxxxxxxxx>, Joseph Mack <mack@xxxxxxxxxxx>, lvs-users@xxxxxxxxxxxxxxxxxxxxxx
From: Julian Anastasov <ja@xxxxxx>
Date: Thu, 12 Oct 2000 01:06:47 +0000 (GMT)
        Hello,

On Tue, 10 Oct 2000, tc lewis wrote:

> i don't seem to have a man page for "ip".  is there one anywhere?  or
> documentation in the kernel sources or something?

http://www.ds9a.nl/2.4Routing/

Some docs from Rusty:
        http://netfilter.kernelnotes.org/unreliable-guides/index.html

Ip-Route2:
        ftp://ftp.inr.ac.ru/ip-routing/

> > echo 0 > /proc/sys/net/ipv4/conf/all/send_redirects
> > echo 0 > /proc/sys/net/ipv4/conf/eth0/send_redirects
> >
> > ipchains -A forward -s 10.100.50.0/24 -j MASQ
>
> can you perhaps explain how those icmp redirects come into play?  i'm not
> sure i fully understand this.

        ICMP Redirects are replied to the sender when the packets
are forwarded through the same device. In your case the real server,
the LVS box and the external router are on same shared media. So, the
LVS router tries to redirect the RS to the other router. The
device flag disallows such redirects to be returned to the RS
because the masquerading requires the packets to reach the masq box
in both directions.

> i may need to do something like this as well, only maybe with a separate
> machine for masquerading, as opposed to the lvs director.  but the real
> server advanced routing would at least still apply.
>
> -tcl.


Regards

--
Julian Anastasov <ja@xxxxxx>



<Prev in Thread] Current Thread [Next in Thread>