I have been doing some research into several application switch
technologies and in the course of evaluating them I think I have a few
ideas for LVS.
For systems that are not local to LVS and do not have the capability of
being tunneled then you might be able to do the following:
Method one (DoubleNAT):
Setup an Iptables NAT that will allow the LVS director to access the
remote machine on a local hidden address. Then setup an LVS-NAT to the
NAT'ed address. This would make it completely transparent to teh client
although a performance hit for doing NAT twice would happen.
Method two (Proxy based):
Setup a Squid or some other type of reverse proxy back to the remote
server on the LVS director. Then setup an LVS-NAT to the proxied
address.
Method three (NAT/DR):
Setup an Iptables NAT that will allow the LVS realservers to access the
remote machine by IP address. Setup LVS-DR for your realservers.
Do any of these three methods sound feasable?
Thanks,
Brett
|