LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: Redirection of packets based on source IP address

To: "LinuxVirtualServer.org users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: Redirection of packets based on source IP address
From: Joseph Mack NA3T <jmack@xxxxxxxx>
Date: Tue, 13 Feb 2007 10:01:52 -0800 (PST)
On Tue, 13 Feb 2007, Martijn Grendelman wrote:

Ehr.. no reason, I guess. It's still there from when I used RR scheduling and I guess I forgot to remove it. I don't think it is actually useful.

Are you up for removing persistence (as a test) and let me know how it goes?

On a different topic - why do you have publically accessable realservers?

Why, is that a problem? Security or otherwise?

I've been telling everyone (in the HOWTO and on the mailing list) not to expose the realservers. This gives attackers more places to get in. If you aren't having any problems, then I should at least remember that not everyone has to do it.

We run a few applications that don't scale well, so we keep the webserver on the realservers open for those.

OK

Joe

--
Joseph Mack NA3T EME(B,D), FM05lw North Carolina
jmack (at) wm7d (dot) net - azimuthal equidistant map
generator at http://www.wm7d.net/azproj.shtml
Homepage http://www.austintek.com/ It's GNU/Linux!

<Prev in Thread] Current Thread [Next in Thread>