|
On Tue, 28 Feb 2006, Brad Dameron wrote:
This all seems to work. I am curious if using iptables to handle
masquerading is the proper way to allow my internal machines to ping/ssh
to the outside world since I am using NAT or can the IPVS handle this?
from the proper way of being secure, you don't want you
clients to have any way of knowing that the realservers
exist. The LVS should look like a single machine.
If you're prepared to throw that away, then iptables is the
way to go. We're not going to let ipvs help you though.
Joe
--
Joseph Mack NA3T EME(B,D), FM05lw North Carolina
jmack (at) wm7d (dot) net - azimuthal equidistant map
generator at http://www.wm7d.net/azproj.shtml
Homepage http://www.austintek.com/ It's GNU/Linux!
|
