All of lore.kernel.org
 help / color / mirror / Atom feed
From: "Daniel F. Chief Security Engineer -" <danielf@supportteam.net>
To: Sander Sneekes <sander@dmdsecure.com>,
	Netfilter Mailing List <netfilter@lists.netfilter.org>
Subject: Re: load balancing
Date: Mon, 3 Feb 2003 10:30:53 -0600	[thread overview]
Message-ID: <200302031030.53569.danielf@supportteam.net> (raw)
In-Reply-To: <1044282910.16954.25.camel@sander>

Im going to be working on one of these later this year it's my understanding 
that you would want to use the nth patch and the state table and SNAT to 
accoplish this. 

From the nth patch.
------------------------
2) Unique rule for every packet.  This is an easy and quick
   method to produce load-balancing for both inbound and outbound.
   example:
   iptables -t nat -A POSTROUTING -o eth0 -m nth --counter 7              
--every 3 --packet 0 -j SNAT --to-source 10.0.0.5
   iptables -t nat -A POSTROUTING -o eth0 -m nth --counter 7              
--every 3 --packet 1 -j SNAT --to-source 10.0.0.6
   iptables -t nat -A POSTROUTING -o eth0 -m nth --counter 7              
--every 3 --packet 2 -j SNAT --to-source 10.0.0.7
   This example evenly splits connections between the three SNAT
   addresses.

   By using the mangle table and iproute2, you can setup complex
   load-balanced routing.
------------------------

Here's a site with good infos on the patches available.
http://www.netfilter.org/documentation/HOWTO//netfilter-extensions-HOWTO.html

Hope this helps. 

On Monday 03 February 2003 08:35, Sander Sneekes wrote:
> currently i'm using this line
>
> iptable -t nat -A PREROUTING -d X.X.X.X -p tcp --dport http -j DNAT
> --to-dest 192.168.0.100-192.168.0.111
>
> this this the job but the if i use the same client it always uses 100
> for ex.
>
> but we need to do some preformance test with 3 client's so everytime a
> client
> does a reqeust to the http server i want to get it for a different
> server.
>
> anybody ?
>
> thanks
> Sander
>
> On Mon, 2003-02-03 at 14:49, Sander Sneekes wrote:
> > Hi all,
> >
> > I need to load balance between 2 webserver
> > what is the most fastest way of doing this?
> > With iptables? if yes wich line's do i need to use
> > i have a RH 7.2 with iptables running already doing
> > al network traffic
> >
> > cheers
> > Sander

-- 
Daniel Fairchild - Chief Security Engineer | danielf@supportteam.net
The distance between nothing and infinity is always the same no matter how 
close you get to nothing.


  reply	other threads:[~2003-02-03 16:30 UTC|newest]

Thread overview: 19+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-02-03 13:49 load balancing Sander Sneekes
2003-02-03 14:35 ` Sander Sneekes
2003-02-03 16:30   ` Daniel F. Chief Security Engineer - [this message]
2003-02-04 15:35     ` Sander Sneekes
  -- strict thread matches above, loose matches on Subject: below --
2005-04-04  9:46 Load balancing Visham Ramsurrun
2005-04-03 19:17 szpak
2005-04-03 20:49 ` Pablo Neira
2005-04-04  3:23 ` Grant Taylor
     [not found] <41BDA86F.8070108@rocsys.com>
2004-12-13 14:19 ` Load Balancing Trent Lloyd
2003-07-12 19:05 LOAD BALANCING Javier Govea
2003-04-03  7:40 Load Balancing Allan de Borde
2003-04-02 15:24 Carlos Ble
2003-04-02 11:16 Allan de Borde
2003-04-02 16:43 ` Matthew G. Marsh
2003-04-02 10:59 Allan de Borde
2003-03-17 21:29 Load balancing Walsh, Ed
2003-03-17 21:44 ` Nathan
2003-03-18  7:48 ` Jamie Harris
2001-01-04 10:43 WOOHOO!!!!!! IDEDMA Timeouts!! Andre Hedrick
2001-01-04 11:31 ` Load balancing John Brosnan

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=200302031030.53569.danielf@supportteam.net \
    --to=danielf@supportteam.net \
    --cc=netfilter@lists.netfilter.org \
    --cc=sander@dmdsecure.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.