On Mon, 22 May 2006, Graeme Fowler wrote:
Easy.
Simply have a SNAT rule on your director's external interface such that
packets going out from the realserver get mapped to the VIP; assuming here
that the external interface is eth0:
iptables -t nat -I POSTROUTING -o eth0 \
-s $REALSERVER_IP \
-d 0/0 \
-j SNAT --to-source $VIRTUAL_IP
so this traffic is not on a port that ipvsadm is
controlling and LVS ignores these reply packets?
Joe
--
Joseph Mack NA3T EME(B,D), FM05lw North Carolina
jmack (at) wm7d (dot) net - azimuthal equidistant map
generator at http://www.wm7d.net/azproj.shtml
Homepage http://www.austintek.com/ It's GNU/Linux!
|