|
On Thursday 22 April 2004 17:41, Joseph Mack wrote:
> Michael Daum wrote:
> >
> > But I had to switch on SNAT
> > also to get all services work properly from the realservers. Is that meant
> > to
> > be so?
>
> No.
>
> ip_vs has NAT in both directions already built in.
> The reply packets come out already NAT'ed for you
What about packages that originate from the realservers, e.g. dns.
The ip_vs is not expecting these packages and will not NAT these.
iptables' SNAT will happily fill that gap.
Micha.
--
-- Michael Daum
-- Natural Language Systems
-- Department of Informatics
---University of Hamburg
-- http://nats-www.informatik.uni-hamburg.de/~micha
|
