LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: netfilter NAT and LVS-NAT differences

To: "LinuxVirtualServer.org users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: netfilter NAT and LVS-NAT differences
From: Joseph Mack NA3T <jmack@xxxxxxxx>
Date: Thu, 18 May 2006 09:33:14 -0700 (PDT)
On Thu, 18 May 2006, [iso-8859-1] Hervé Eychenne wrote:

Why is that so? Why couldn't LVS proceed as netfilter NAT does? (that is, not require that the IP address is really defined on the gateway)


LVS was originally based on masquerading code. Then when netfilter came along, LVS was rewritten for netfilter, but the fit wasn't really good. It was originally hoped that LVS would just be a netfilter module, but for reasons I don't understand, it couldn't be done. As well some of netfilter was written in a way that disabled some of the features of LVS (transparent proxy). There's a fair bit of code that wasn't fixed up and got forgotten about, when it didn't impact anyone. Ken Brownfield just found one of them. The problem is that all of LVS is being done by less than a handfull of people working in their spare time.

So it may be quite possible to have LVS do what you expect here and no-one has done it. Are you up for fixing it?

Thanks Joe

--
Joseph Mack NA3T EME(B,D), FM05lw North Carolina
jmack (at) wm7d (dot) net - azimuthal equidistant map
generator at http://www.wm7d.net/azproj.shtml Homepage http://www.austintek.com/ It's GNU/Linux!




<Prev in Thread] Current Thread [Next in Thread>