DNAT/NAPT

DNAT/NAPT

[Ugo Bellavance]

Hi,

   I think that it is possible to achieve some kind of load-balancing 
between two servers using iptables NAPT (Network and port translation, 
which is usually called port forwarding).

I want to run 2 web servers and use my firewall to do some 
load-balancing between them, but I was wondering if it only forwarded 
the packets on some round-robin way, even if one host is down.  To 
summarize, I want to know if I can do some automatic failover with iptables.

If you need more info, let me know

Thanks

Ugo

Re: DNAT/NAPT

[Jason Opperisano]

On Tue, Nov 23, 2004 at 02:43:56PM -0500, Ugo Bellavance wrote:
> Hi,
> 
>   I think that it is possible to achieve some kind of load-balancing 
> between two servers using iptables NAPT (Network and port translation, 
> which is usually called port forwarding).
> 
> I want to run 2 web servers and use my firewall to do some 
> load-balancing between them, but I was wondering if it only forwarded 
> the packets on some round-robin way, even if one host is down.  To 
> summarize, I want to know if I can do some automatic failover with iptables.
> 
> If you need more info, let me know

why not do it for real?

  http://www.linuxvirtualserver.org/

-j

--
"That's it! You people have stood in my way long enough. I'm going
 to clown college!"
        --The Simpsons

Re: DNAT/NAPT

[Ugo Bellavance]

Jason Opperisano wrote:
> On Tue, Nov 23, 2004 at 02:43:56PM -0500, Ugo Bellavance wrote:
> 
>>Hi,
>>
>>  I think that it is possible to achieve some kind of load-balancing 
>>between two servers using iptables NAPT (Network and port translation, 
>>which is usually called port forwarding).
>>
>>I want to run 2 web servers and use my firewall to do some 
>>load-balancing between them, but I was wondering if it only forwarded 
>>the packets on some round-robin way, even if one host is down.  To 
>>summarize, I want to know if I can do some automatic failover with iptables.
>>
>>If you need more info, let me know
> 
> 
> why not do it for real?
> 
>   http://www.linuxvirtualserver.org/

Because, in fact, I'll be using trustix firewall and I know it is based 
on iptables, and I don't want to do the work if it's already been done.

I'll check lvs if it doesn't do what I want.

Thanks,
> 
> -j
> 
> --
> "That's it! You people have stood in my way long enough. I'm going
>  to clown college!"
>         --The Simpsons
> 
>