[lvs-users] Real server refuses packets originated from itself and redirected by LVS
ct at swin.edu.au
Mon Nov 9 00:54:16 GMT 2009
On Fri, 6 Nov 2009, Simon Horman wrote:
> I also wonder if a different approach could work. Assuming that
> the connection from the real-server doesn't need to be load-balanced,
> I wonder if an iptables rule could be constructed such that
> the real-server just directly connects to itself when accessing the VIP.
iptables -t nat -I OUTPUT -p tcp -d $VIP --dport 80 -j DNAT --to-destination $IP:80
where $IP = primary IP address of real server
I use LVS-DR with the VIP only configured on the LVS director and iptables
rules on the real servers. The iptables rule above is what I use to allow the
real server to connect to itself when accessing the VIP.
More information about the lvs-users