AW: DNS Server Cluster

[Joseph Mack NA3T]

On Tue, 28 Nov 2006, Simon Pearce wrote:

> Do you have a large iptables rule set that might be slowing things down?
> iptables scales with O(n^2); still 250 IPs doesn't seem a lot of IPs.
>
> No this is the output of iptables -L
>
> lvs01 ~ # iptables -L
> Chain INPUT (policy ACCEPT)
> target     prot opt source               destination
>
> Chain FORWARD (policy DROP)
> target     prot opt source               destination
> ACCEPT     all  --  192.168.1.0/24       anywhere
> ACCEPT     all  --  anywhere             192.168.1.0/24
>
> Chain OUTPUT (policy ACCEPT)
> target     prot opt source               destination
>
> All i really use is ip masquerading so that my realservers can access
> the net to recieve updates everything else is left open.

Just had an idea...

David M has an LVS with 30 VIPs.

http://marc.theaimsgroup.com/?l=linux-virtual-server&m=116613085127672&w=2

His realservers are nat'ed out to the internet. He has to 
make sure that the calls come out through the correct VIP.
Does this sound like your problem?

Joe

-- 
Joseph Mack NA3T EME(B,D), FM05lw North Carolina
jmack (at) wm7d (dot) net - azimuthal equidistant map
generator at http://www.wm7d.net/azproj.shtml
Homepage http://www.austintek.com/ It's GNU/Linux!