Hi,
In the HOWTO, I don't understand why does the director is "usually" VIP-less?
Is it for performance or cleaner design? Is it all right if the director has
VIP?
It's because my design is something like:
client
|
|
V
router---------------------
| |
| |
V V
FD1 FD2
| |
--------------------------
| | | |
| | | |
V V V V
RS1 RS2 RS3 RS4
Where FM & FM are combination of firewall and director, and RS are the
realservers
The router is untouchable, since it belongs to the ISP. I won't be able to
add routing dest_addr=VIP to forward to the FD. If FD1 and FD2 has IP of
VIP1 and VIP2 respectively, then the router would be able to forward it.
Further, by patching FD1 and FD2 with source martians patch, and creating
default gw for RS according to the src_addr (i.e. if src_addr=VIP1, then gw
is to FD1, if src_addr=VIP2, gw is FD2), is it workable?
Thank you
|