On Thu, 9 Oct 2003, Horms wrote:
> As per some discussions earlier in the week with Joe and others here is
> a patch to try and auto load the ip_vs_ftp module if a real server is
> added which uses LVS-NAT and the vport is 23.
>
> N.B: There are lots of times when this won't work, for example if you
> are using fwmark virtual services. But it should handle the simple case
> where a ip/port LVS-MASQ virtual service needs ip_vs_ftp.
>
> I decided to do this in ipvsadm rather than the kernel code as there is
> no natrual dependancy for the kernel code to work with so it seemed
> better to handle it in user space. Also the change in user space was
> very easy. Easy is good :)
>
> Perhaps putting this in the kernel would allow us to catch fwmark
> virtual services. But my feeling is that if you have worked out how to
> use fwmarks then working out that you need ip_vs_ftp should be pretty
> straight forward.
>
Yes, it's probably good to do it in the user-space, because it's hard for
the kernel to know which nat helper to load if users run services
different from the default ports.
Regards,
Wensong
|