Re: RES: NAT 1:N

[Frank Gruellich <frank@der-frank.org>]

Hi,

* Gustavo L. P. dos Santos <gustavo.santos@inep.gov.br> 29. Jun 07:
> Maybe I wasn??t clear enought with my question, the two machines are
> web servers visible on the Internet, and I can??t use MASQUERADE for
> this. If it was the basics i wouldn??t bother you all. And sorry for
> the annoyance.

Don't worry, seems you're not the only one who should do some RTFM on
this list...

The situation you have is clearly described at Oskar Andreassons great
tutorial (a Must-Read for iptables users, IMHO):
http://iptables-tutorial.frozentux.net/iptables-tutorial.html#DNATTARGET

You should use a range of IP#s for --to-destination.  Note, that single
TCP streams will allways be directed to same server while different
streams will be directed in a simple load balancing manner (I think
round robin).  This implies that you don't have any problems with rather
static content, but if you keep session information at server you have
to distribute that to all your webservers.

HTH, kind regards,
 Frank.
-- 
Sigmentation fault