LVS-TUN setup - responses from realserver not being let through

[Per Jessen]

Per Jessen wrote:

> Joseph Mack NA3T wrote:
>> you'll have to change their filter rules to allow packets
>> out that are coming from the VIP (which won't be in their
>> network).
> 
> Yeah.  That is what seems to be causing the problem right now.

OK, just a quick feedback - the datacenter has confirmed they've got a
router check for "IP Spoofing" enabled, which prevents the real server
responses from getting through.  I've now ordered 5 servers on the same
physical network, which will then hopefully work.  If not, I guess I
could resort to LVS-NAT.



/Per Jessen, Zürich, OZ1HZV