Re: LVS-NAT: Block Clients From Direct Access To Realservers

[Joseph Mack <mack.joseph@xxxxxxx>]

Horms wrote:

> Don't use LVS-NAT if your end-users are on the same network as the
> real servers. Use LVS-DR instead. Then, if you want to be pedantic,
> block direct connections from the end-users to the real servers
> using iptables.

or you can use

http://www.linuxvirtualserver.org/Joseph.Mack/HOWTO/LVS-HOWTO.LVS-NAT.html#one_network

Joe

-- 
Joseph Mack PhD, High Performance Computing & Scientific Visualization
SAIC, Supporting the EPA Research Triangle Park, NC 919-541-0007
Federal Contact - John B. Smith 919-541-1087 - smith.johnb@xxxxxxx