[lvs-users] Problem with LVS-TUN different network -- Is this still impossible

hirantha hirantha at securedpipe.net
Fri Mar 7 11:21:53 GMT 2008


Thanks for the reply Graeme,

Graeme Fowler wrote:
> On Fri, 2008-03-07 at 12:20 +0530, hirantha wrote:
>> Basically I don't administrate the firewalls, routers on the realserver resides ISP. I think this is obvious -- 
>> most of people doesn't have network control on the ISP. But I can tell them the situation. I would like to know what 
>> would be on firewalls and routers to be eligible to establish lvs-tun. What should I tell them..?
> 
> The people administering the networks that the realservers live on need
> to allow egress (outbound) traffic from the VIP for LVS-TUN to work.
> 
> Using TUN, the realservers reply directly to the clients:
> 
> http://www.linuxvirtualserver.org/VS-IPTunneling.html
> 

Is there are users exists who using LVS-TUN, VPN or Layer2 network spanned..? (who do not control 
ISP level). Is there away we could accomplish this -- Global server load balancing. I know some 
commercial version of this but, I prefer something like LVS-tun.

I would appreciate if you could share your scenario with me.

Thanks and regards

-+> Hirantha


> If you have realservers on networks controlled by different providers,
> they probably won't advertise the VIP to their peers or permit traffic
> from the VIP to leave their network, especially if their upstreams apply
> filters to the announcements they receive. It would be seen as a form of
> spoofing.
> 
> You can ask them to, but I suspect the answer will be no.
> 
> Graeme
> 
> 
> _______________________________________________
> LinuxVirtualServer.org mailing list - lvs-users at LinuxVirtualServer.org
> Send requests to lvs-users-request at LinuxVirtualServer.org
> or go to http://lists.graemef.net/mailman/listinfo/lvs-users
> 


Search lvs-users Archives
Limit search to: Subject & Body Subject Author
Sort by: Reverse Sort

More information about the lvs-users mailing list