Hi,
>the client sends a packet with src=CIP, dst=VIP (abbreviated
CIP->VIP),
>the realserver receives a packet with the dst rewritten
(CIP->RIP). The
>realserver replies (RIP->CIP). If this arrives at the client
directly
>(as happens when you don't have the director as the default gw
of the realservers),
>the packet is not recognised at part of any request the client
made.
>The reply packets have to be masqueraded on the way out.
Hmmm, I see what you are saying.
I am trying to figure out how Cisco do this, because this is
what they do in the Cisco LocalDirector and it works. I will investigate
further.
Serge
|