|
Malcolm Turnbull wrote:
>
> OK, I guess I was just being lazy :-).
> which never gives good results.
Other points to consider is how much damage a person can do who gets
root on one of your machines. With LVS-DR, all packets from the
attacker will come from the RIP whereas the packets from the LVS will
come from the VIP. You can set your routing so that packets from the RIP
don't go outside the RIP network. Also don't have a default route on the
director.
http://www.linuxvirtualserver.org/Joseph.Mack/HOWTO/LVS-HOWTO-13.html#ss13.6
Joe
--
Joseph Mack PhD, Senior Systems Engineer, Lockheed Martin
contractor to the National Environmental Supercomputer Center,
mailto:mack.joseph@xxxxxxx ph# 919-541-0007, RTP, NC, USA
|
