Using ipvsadm v1.24.
IPVS machine IP:
eth0: 69.90.134.99
eth1: 192.168.1.1
Simple rules configuration:
-A -t 69.90.134.107:443 -s wlc
-a -t 69.90.134.107:443 -r 192.168.1.71:443 -m -w 1
-A -t 69.90.134.107:80 -s wlc
-a -t 69.90.134.107:80 -r 192.168.1.71:80 -m -w 1
-A -t 69.90.134.107:22 -s wlc
-a -t 69.90.134.107:22 -r 192.168.1.71:22 -m -w 1
-A -t 69.90.134.107:21 -s wlc
-a -t 69.90.134.107:21 -r 192.168.1.71:21 -m -w 1
This all seems to work. I am curious if using iptables to handle
masquerading is the proper way to allow my internal machines to ping/ssh
to the outside world since I am using NAT or can the IPVS handle this?
Thank you,
Brad Dameron
SeaTab Software
|