ipvs with ipsec

Farid Sarwari fsarwari at exchangesolutions.com
Thu Jul 27 20:17:02 BST 2006


> so this is the Brownfield patch modified for 2.6.16?

If you look in the patch there is function called ip_vs_route_me_harder
with is an exact copy of ip_route_me_harder from netfilter.c. 
I'm not sure what version of ipvs/kernel Brownfield's patch is for. I
couldn't get ipvs to compile with his patch, so I just used his idea and
copied the new code from the netfilter source code. I haven't done
extensive testing. I find any bugs I will post them.

> Can you do IPSec with LVS-DR? (the director would only 
> decrypt and the realservers encrypt)

The only thing this patch does is fix the routing for the masq'd return
packets. 



Search lvs-users Archives
Limit search to: Subject & Body Subject Author
Sort by: Reverse Sort

More information about the lvs-users mailing list