RE: transparent redirect for a certain netblock?

[Peter Mueller <pmueller@xxxxxxxxxxxx>]

> > > Can I solve this problem with packet marking?  I have a setup 
> > > in production (keepalived, mon, transparent redirects on 
> > > application servers) and I would rather not modify if possible.

it turns out packet marking _IS_ the solution.  this is an awesome tool!

Julian supplied the recipe.  I owe him many many beers.  If anyone is
curious, here it is..

<recipe>
ipchains -A input -p TCP -s $client -d VIP 80 -m 1 -j ACCEPT
ipvsadm -A -f 1 -s wlc
ipvsadm -a -f 1 -r $real_server
# rest of ipvsadm stuff goes next...
</recipe>

cheers & good day

Peter