Re: network granularity with persistent fwmark

[Joseph Mack <mack.joseph@xxxxxxx>]

Julian Anastasov wrote:
 
> So, for client 10.1.2.3/24 (24=persistent granularity) the template
> looks like this:
> 
> 10.1.2.0:0 -> VIP:0 -> RIP:0
> 
> The patched LVS:
> 
> 10.1.2.0:0 -> FWMARK:0 -> RIP:0

so if I did

iptables -s 10.1.2.3 -m 1
ipvsadm -A -f 1 -s rr -p 600 -M 255.255.255.0

only packets from 10.1.2.3 will have a fwmark on them,
but the director would forward all packets from
10.1.2.0/24, even those without fwmarks?

Joe

-- 
Joseph Mack PhD, Senior Systems Engineer, Lockheed Martin
contractor to the National Environmental Supercomputer Center, 
mailto:mack.joseph@xxxxxxx ph# 919-541-0007, RTP, NC, USA