Re: LVS 4 server setup with directors running on gateway shorewall servers

[Malcolm <lists@xxxxxxxxxxxxxxxx>]

Jason Powell wrote:
> If I put a DNAT rule on shorewall to send port 80 to a real server instead of the VIP, 
> I’m able to access the real servers webpage (obviously not being load balanced 
> though).
>
>   
Jason,

When you DNAT to the VIP on the LVS, are you also doing a SNAT for the RIPs?
They will need to be able to reply to the clients directly through the 
firewall (unless you are using the LVS director as gateway patch.)
Regards,
Malcolm.