LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: [lvs-users] LVS-Nat - access to external ip from internal machines

To: "LinuxVirtualServer.org users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: [lvs-users] LVS-Nat - access to external ip from internal machines
From: Graeme Fowler <graeme@xxxxxxxxxxx>
Date: Thu, 19 Feb 2009 16:04:16 +0000
Hi George

On Thu, 2009-02-19 at 19:34 +0400, George Machitidze wrote:
> I have a problem with accessing IP's of external balancer machines
> from internal machines:
<snip>
> from internal machines i cannot access 100.100.100.3 ip.

The short answer is that you can't.

The longer answer is that you can, but it's complex and may not be
possible in all configurations.

The simplest way I can think of (which is untested and only applies to
Linux realservers - internal machines) is to use the iptables REDIRECT
target on outbound traffic destined for the RIP, like this:

iptables -t nat -I OUTPUT -d $VIP -j REDIRECT

You'll have to make sure that your services are configured to handle
traffic being sent to 127.0.0.1 for this to work.

Other solutions may be available:

http://www.austintek.com/LVS/LVS-HOWTO/HOWTO/LVS-HOWTO.lvs_clients_on_realservers.html#lvs_clients_on_LVS-NAT_realserver_contacting_services_on_VIP

Graeme


_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

<Prev in Thread] Current Thread [Next in Thread>