LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: Firewall Marks

To: "LinuxVirtualServer.org users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: Firewall Marks
From: Joseph Mack <mack.joseph@xxxxxxx>
Date: Wed, 06 Aug 2003 12:07:20 -0400
Chris wrote:
> 
> Question:
> 
> If you mark packets from the real IP address of the director, i.e. NOT the 
> VIP, can you then distribute and balance those as if they were comming in 
> from a VIP?

please put carriage returns into your posting. Your paragraphs are one line.

If you put a fwmark onto a packet, then the concept of the VIP doesn't exist.
ipvsadm forwards/schedules packets based on the value of the fwmark not
on the VIP.
The client then only has to know the IP on the outside of the director in
order to send the packets to it. 

Joe

-- 
Joseph Mack PhD, High Performance Computing & Scientific Visualization
SAIC, Supporting the EPA Research Triangle Park, NC 919-541-0007
Federal Contact - John B. Smith 919-541-1087 - smith.johnb@xxxxxxx
<Prev in Thread] Current Thread [Next in Thread>