SSL with LVS

[Brad Dameron]

On Mon, 2006-08-07 at 14:10 -0500, Chris Holloway wrote:
> Hi, I am trying to get loadbalancing working for SSL.  So far I have not 
> been able to find much documentation in the way of getting it setup.  
> I've tried setting it up in ldirectord.conf but have never been able to 
> get it working successfully. The setup is real IP 207.7.248.20 and 
> internal servers 10.0.1.1, 10.0.4.1, and 10.0.8.1. Can anyone  help 
> steer me in the right direction.
> 
> Thanks,
> 
> Chris

I do believe you will want to look at this:

http://www.linuxvirtualserver.org/VS-NAT.html

Here is an example ipvsadm.rules file for your setup:

-A -t 207.7.248.20 -s wlc
-a -t 207.7.248.20 -r 10.0.1.1 -m -w 1
-a -t 207.7.248.20 -r 10.0.4.1 -m -w 1
-a -t 207.7.248.20 -r 10.0.8.1 -m -w 1

I also highly recommend keepalived. It makes things much easier.

Brad Dameron
SeaTab Software
www.seatab.com