load balancing?

load balancing?

[Jean-Yves Simon]

Hello,

I'm curious if load balancing can be done with iptables, like for
example forwarding incoming web requests to one of the multiple web
servers behind the firewall.

Or is a third party software needed?


Maybe it is this planned for the future (pkttables or don't know what
name it will have)?




PS: can you please crosscopy to my email address, since i'm not a member
of this mailing list.



-- 
Jean-Yves Simon <lethalwp@tiscali.be>

load balancing?

[Jean-Yves Simon]

Hello,

I'm curious if load balancing can be done with iptables, like for
example forwarding incoming web requests to one of the multiple web
servers behind the firewall.

Or is a third party software needed?


Maybe it is this planned for the future (pkttables or don't know what
name it will have)?





-- 
Jean-Yves Simon <lethalwp@tiscali.be>

Re: load balancing?

[Joel Newkirk]

On Sat, 2003-06-14 at 07:54, Jean-Yves Simon wrote:
> Hello,
> 
> I'm curious if load balancing can be done with iptables, like for
> example forwarding incoming web requests to one of the multiple web
> servers behind the firewall.
> 
> Or is a third party software needed?

If all you need is to distribute requests evenly across a range of IPs
you can use the rule:

iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to
10.10.10.1-10.10.10.16

This example would attempt to distribute incoming HTTP requests evenly
across the specified range of 16 IPs.

j

Re: load balancing?

[Antonio Paulo Salgado Forster]

if you want load balancing, you should look at http://www.keepalived.org
and/or http://www.linuxvirtualserver.org/

--
Forster


Joel Newkirk <netfilter@newkirk.us>@lists.netfilter.org on 06/14/2003
12:36:55 PM

Sent by:    netfilter-admin@lists.netfilter.org


To:    Jean-Yves Simon <lethalwp@tiscali.be>
cc:    netfilter@lists.netfilter.org
Subject:    Re: load balancing?



On Sat, 2003-06-14 at 07:54, Jean-Yves Simon wrote:
> Hello,
>
> I'm curious if load balancing can be done with iptables, like for
> example forwarding incoming web requests to one of the multiple web
> servers behind the firewall.
>
> Or is a third party software needed?

If all you need is to distribute requests evenly across a range of IPs
you can use the rule:

iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to
10.10.10.1-10.10.10.16

This example would attempt to distribute incoming HTTP requests evenly
across the specified range of 16 IPs.

j

Re: load balancing?

[Garcia Ruiz]

Hello,

When nating a dest port to a server, if you tell iptables that there are two
dest servers instead of one, it sends requests to them in a round-robin
fashion (it sends one request -one TCP/IP connection- to the first server,
another to the second, etc. -you can even tell iptables that there are 3, 4
or even more servers).

The problem is that you don't have failure support, so I suggest you to look
for other products if you have time (in any case it is true that with
iptables you only need to set up one rule -easy- and there is no third party
software so problems and performance OK). Be careful also if session track
needed because the next connection that the external browser stablishes with
the http server may be done to the other server.

Regards.

JBGR



----- Original Message ----- 
From: "Jean-Yves Simon" <lethalwp@tiscali.be>
To: <netfilter@lists.netfilter.org>
Sent: Friday, June 13, 2003 6:51 AM
Subject: load balancing?


> Hello,
>
> I'm curious if load balancing can be done with iptables, like for
> example forwarding incoming web requests to one of the multiple web
> servers behind the firewall.
>
> Or is a third party software needed?
>
>
> Maybe it is this planned for the future (pkttables or don't know what
> name it will have)?
>
>
>
>
> PS: can you please crosscopy to my email address, since i'm not a member
> of this mailing list.
>
>
>
> -- 
> Jean-Yves Simon <lethalwp@tiscali.be>
>
>
>

Re: load balancing?

[Fabrice MARIE]

Hello Jean-Yves,


On Friday 13 June 2003 12:51, Jean-Yves Simon wrote:
> Hello,
> I'm curious if load balancing can be done with iptables, like for
> example forwarding incoming web requests to one of the multiple web
> servers behind the firewall.
> Or is a third party software needed?
> Maybe it is this planned for the future (pkttables or don't know what
> name it will have)?
> PS: can you please crosscopy to my email address, since i'm not a member
> of this mailing list.

You'll find everything you need here:
http://www.linuxvirtualserver.org/

Have a nice day,

Fabrice.
--
Fabrice MARIE

"Silly hacker, root is for administrators"
       -Unknown