Hello.
I am new with ipvs so my question may be rather stupid.
Our administrator uses ip aliasing so that all attacks strike the
router/firewall.
Eg. the real ip of a machine is 195.195.195.195 which is eth0:5 on the
router and the host uses a fake ip eg 192.168.0.200.
The router redirects the packets for some services using ipvs.
The commands he uses are similar to the following:
/sbin/ipvsadm -A -t 195.195.195.195:80 -s rr
/sbin/ipvsadm -a -t 195.195.195.195:80 -r 192.168.0.200:80 -m -w
I believe the same thing is accomplished with
iptables -t nat -A PREROUTING -i eth0 -d 195.195.195.195 --to 192.168.0.200
So, my question is since we don't use load balancing and we just do 1-1
redirection do we gain something by using ipvs or we can just use iptables
for it ?
Thank you for your time.
_________________________________________________________________
Send and receive Hotmail on your mobile device: http://mobile.msn.com
|