On Sat, 5 Jan 2008, William Ottley wrote:
> I'm trying to setup a LVS-TUN, which has 3 internet connections.
> eth0 - public (client)
> eth1 - public TUN to webserver 1
> eth2 - public TUN to webserver 2 and webserver 3 (same network)
>
> where would the VIP be?
eth0 if you're using iproute2 tools. ethernet aliases are
deprecated (but might still work). See the HOWTO.
eth1,2 shouldn't be public, it's a security hole. You may
not have any choice in whether they're private or public but
at least you should be aware.
> eth0:1?, also, do we enable ipv4 forward to
> the webservers or just the LVS?
to eth1,2
> I'm also confused about the lo:0. do we do that on the webservers or
> just do the:
forget aliases, use just lo (I know the HOWTO is riddled
with them aliases because of history, but no-one is going to
rewrite the HOWTO anytime soon)
Joe
--
Joseph Mack NA3T EME(B,D), FM05lw North Carolina
jmack (at) wm7d (dot) net - azimuthal equidistant map
generator at http://www.wm7d.net/azproj.shtml
Homepage http://www.austintek.com/ It's GNU/Linux!
|