Julian Anastasov wrote:
>
> The rule is simple: only the routing decides when outgoing
> connections are created initiated from the NAT-ed servers. When LVS
> creates connections to NAT-ed real servers the VIP is set as the
> masquerading address.
with an VS_NAT setup, when I run
> ipchains -A forward -p tcp -j MASQ -s realserver1 telnet -d 0.0.0.0/0
on the director, so that telnet packets can get back from the real-server
to the client, LVS steps in and makes sure that the VIP becomes the
src_addr, whereas if there had been no ipvsadm commands run, then
the routing would have determined the src_addr?
Does LVS fiddle with the ipchains tables to do this?
Joe
--
Joseph Mack PhD, Senior Systems Engineer, Lockheed Martin
contractor to the National Environmental Supercomputer Center,
mailto:mack.joseph@xxxxxxx ph# 919-541-0007, RTP, NC, USA
|