Re: HTTP connection tracking

[Patrick McHardy <kaber@trash.net>]

Jan Engelhardt wrote:
> Hi,
> 
> a user in irc came up with the following scenario:
> 
> - home router is connected to two ISPs with different IP addresses and 
>   does round-robin or some other form of packet scheduling.
> 
> - in such a setup, one generally uses MARK/CONNMARK to make sure that 
>   packets of a certain connection always leave through the same device 
>   through which the first packet was sent. (This is required to not 
>   break TCP connections.)
> 
> But how can we make sure that arbitrary connections which are defined as 
> related, can be sent through the same device? Think of a website which, 
> when the user is logged in, requires that all HTTP and HTTPS connections 
> that will be made by the user, must come from the same IP address.
 >
> Connection helpers seemed like a good idea at first, since expected 
> connections inherit the connmark value of the original connection. 
> However, once an expectation is set up, there is no way to set up 
> another right after one expectation has been confirmed.

Why not?