From: Peter Warasin <peter@endian.it>
To: lartc@vger.kernel.org
Subject: Re: [LARTC] Load balancing using connmark
Date: Thu, 10 May 2007 10:25:37 +0000 [thread overview]
Message-ID: <4642F321.4050300@endian.it> (raw)
In-Reply-To: <1178722806.7492.55.camel@vulcan.aspl>
hi people
Francis Brosnan Blazquez wrote:
> I've been implementing a load balancing solution using CONNMARK, based
> After giving a try during several days, I've found that another firewall
> solution, shorewall [2], implements built-in load balacing for free by
> using the following set of instructions:
did somebody try the shorewall solution with centos 4?
with centos 4 and the first solution i always had the problem, that it
routes correctly only for passing through connections (forwarded).
connections starting from the machine or hoing to the machine
(input/output chain) had exactly the same behaviour as you stated before.
i noticed with centos 4 that packets do not pass the prerouting magle
chain if going to the local host (passing the input filter chain
thereafter). therefore certainly the mark will not be restored and there
will be no influence on the routing decision.
someone noticed similar behaviour?
peter
--
:: e n d i a n
:: open source - open minds
:: peter warasin
:: http://www.endian.com :: peter@endian.com
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
next prev parent reply other threads:[~2007-05-10 10:25 UTC|newest]
Thread overview: 12+ messages / expand[flat|nested] mbox.gz Atom feed top
2007-05-09 15:00 [LARTC] Load balancing using connmark Francis Brosnan Blazquez
2007-05-09 16:33 ` Peter Rabbitson
2007-05-10 6:15 ` Salim S I
2007-05-10 8:01 ` Salim S I
2007-05-10 9:06 ` Francis Brosnan Blazquez
2007-05-10 9:22 ` FW: " Salim S I
2007-05-10 10:25 ` Peter Warasin [this message]
2007-05-10 10:51 ` Peter Rabbitson
2007-05-10 10:59 ` Peter Rabbitson
2007-05-10 11:25 ` Salim S I
2007-05-10 12:04 ` David Ford
2007-05-10 12:06 ` Peter Rabbitson
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4642F321.4050300@endian.it \
--to=peter@endian.it \
--cc=lartc@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.