On Thu, 18 May 2006, [iso-8859-1] Hervé Eychenne wrote:
Why is that so? Why couldn't LVS proceed as netfilter NAT
does? (that is, not require that the IP address is really
defined on the gateway)
LVS was originally based on masquerading code. Then when
netfilter came along, LVS was rewritten for netfilter, but
the fit wasn't really good. It was originally hoped that LVS
would just be a netfilter module, but for reasons I don't
understand, it couldn't be done. As well some of netfilter
was written in a way that disabled some of the features of
LVS (transparent proxy). There's a fair bit of code that
wasn't fixed up and got forgotten about, when it didn't
impact anyone. Ken Brownfield just found one of them. The
problem is that all of LVS is being done by less than a
handfull of people working in their spare time.
So it may be quite possible to have LVS do what you expect
here and no-one has done it. Are you up for fixing it?
Thanks
Joe
--
Joseph Mack NA3T EME(B,D), FM05lw North Carolina
jmack (at) wm7d (dot) net - azimuthal equidistant map
generator at http://www.wm7d.net/azproj.shtml
Homepage http://www.austintek.com/ It's GNU/Linux!
|