Date: Tue, 11 Dec 2001 17:01:03 +0100 From: Gabriel Ambuehl <gabriel_ambuehl@buz.ch> To: "Dustin Puryear" <dpuryear@usa.net> Cc: freebsd-isp@freebsd.org Subject: Re[8]: Using DNAT and DNS round-robin Message-ID: <73616702571.20011211170103@buz.ch> In-Reply-To: <PGECILGGNJGDPJKLFEMICELPCIAA.dpuryear@usa.net> References: <PGECILGGNJGDPJKLFEMICELPCIAA.dpuryear@usa.net>
next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE----- Hello Dustin, Monday, December 10, 2001, 4:57:08 PM, you wrote: > I guess that is where the initial confusion came from. In order for > each webserver to offer the same IP-based virtual hosts as the > other n-1 webservers, it appears that I need to setup the same IP > alias on each webserver, unless I am missing something. Obviously, > that won't work. That is one reason why I was looking at Squid. Ah now I get it. If you bind the virtual hosts to the IP, you have no other option than having the IPs assigned to the firewall and either run statical NAT or some proxy (like squid or apache mod_proxy) on the firewall. > I am surprised this problem isn't more common. I mean, someone out > there must be trying to spread several IP-based virtual hosts > across n servers. Most people probably won't care for IP based or not. That only matters for SSL, anyway. >> with hosting consumers, that's obviously not possible. > Well, we are one of those "we control all data" types. :) That's nice. I wished I were in the same situation... >> You simply can't have the same IP based virtual host on two >> machines. The online thing that can be done there is round robin >> NAT but for reasons pointed out above, that's major PITA. > That is becoming rather obvious to me at this point. Given you can solve the fs inconsistency issues, round robin NAT actually would be the by far fastest solution to do what you want. Squid should do the job too, more flexibly, but probably slower. Best regards, Gabriel ÜyœòÔÄŠ& Ä -----BEGIN PGP SIGNATURE----- Version: PGP 6.5i iQEVAwUBPBYftsZa2WpymlDxAQHJ+wf/WDJRAA3cXZflbe4BOafbRdwX05WJphek k6pkgYl/StE5Qap8ke2rEjsngnYqiuNyBXyMvxRh1OtlK/ECflkDeVMUY8R5XGgP z4xQEY2G4pKuSwSMUC8UwXJV2hPrO7UDxZtpmN2XLlWf/zd892pQEsqBtiJ8IOOg 9LLfnAcE5086hRu5BABGNlc76vZZaD0H9sHQLS0RjVQyBMbxTeMfSdofCXZuD6je fq6E7EofZtlNqBli2b3m10ixW3s9eNsG+lKRNcqcxVVfzy6qbGzTk6cesWVxQdIF edreIjgxiWTDzLGiauaMaWLguvLBcWXT875nURR6oczRUIZSBtTd+A== =4Nvx -----END PGP SIGNATURE----- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?73616702571.20011211170103>