|
Hey William,
To the client the real IP of the web server is unknown. The real
server in its reply uses the VIP as the source address, The response
from the client is re-routed via the LVS.
Ingress Filtering :http://en.wikipedia.org/wiki/Ingress_filtering
Sameer
On Dec 29, 2007 10:58 PM, Joseph Mack NA3T <jmack@xxxxxxxx> wrote:
> yOn Sat, 29 Dec 2007, William Ottley wrote:
>
> > And well here's the thing, I'm really interested in LVS-TUN, but, I
> > might have a problem with the web servers sending data directly TO the
> > client. Doing it this way, exposes the webservers location.
>
> In an LVS, the realservers are not visible to the client.
> See the security section in the HOWTO
>
> please edit your posts so only the parts being replied to
> are in your post
>
> Thanks
>
> Joe
> >
>
> --
>
> Joseph Mack NA3T EME(B,D), FM05lw North Carolina
> jmack (at) wm7d (dot) net - azimuthal equidistant map
> generator at http://www.wm7d.net/azproj.shtml
> Homepage http://www.austintek.com/ It's GNU/Linux!
>
> _______________________________________________
> LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
> Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
> or go to http://lists.graemef.net/mailman/listinfo/lvs-users
>
|
