|
On Thu, 2007-06-14 at 15:40 +0100, Mark Wadham wrote:
> Is this a bad thing?
No. But it means you need to do extra $stuff to make it work.
Briefly, in a one-network LVS-NAT the replies from the realservers will
try to get back to the clients via the most direct route. This means
that they bypass the director, therefore the reverse NAT translation
doesn't happen, and the connection hangs up and eventually times out.
You need to force all responses from realservers back through the
director for LVS-NAT to work.
There's several good explanations of how to do this in the HOWTO and the
list archives.
If you can't find them, or they're not very clear, feel free to ask
again.
Graeme
|
