Re: Client and Director in the same machine with IPVS-NAT

[Roberto Nibali <ratz@xxxxxxxxxxxx>]

Hi,

>                        It is the director
>                 ---------------------------------------------
> External client ---> IPVS:443 --> Local:443 ---> IPVS:80 ---> RealServer
Why do you need this? Seems like a replication of mod_proxy/mod_rewrite.

> The problem happens when Local:443 go to localIPVS:80, because the
> packet is discarted by the next lines in ip_vs_core.c:
>
> if (skb->pkt_type != PACKET_HOST) || skb->dev == &loopback_dev) { 
>         IP_VS_DBG(12, "packet type=%d proto=%d daddr=%d.%d.%d.%d ignored\n",
>                        skb->pkt_type,
>                        iph->protocol,
>                        NIPQUAD(iph->daddr));
>         return NF_ACCEPT;
> }  
Your patch obviously makes it work but I wonder if such a functionality 
is really needed. Any pointers to a previously held discussion on this 
subject, please?
Best regards,
Roberto Nibali, ratz
--
echo 
'[q]sa[ln0=aln256%Pln256/snlbx]sb3135071790101768542287578439snlbxq' | dc