Date: Wed, 14 Nov 2001 00:13:04 -0800 From: "Ted Mittelstaedt" <tedm@toybox.placo.com> To: "Albert Everett" <freebsd@webintl.com>, <freebsd-questions@FreeBSD.ORG> Subject: RE: Max number of NIC's and aliases Message-ID: <004b01c16ce4$2f7f4de0$1401a8c0@tedm.placo.com> In-Reply-To: <a05100301b8159745ec4c@[192.168.123.20]>
next in thread | previous in thread | raw e-mail | index | archive | help
>-----Original Message----- >From: owner-freebsd-questions@FreeBSD.ORG >[mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Albert Everett >Sent: Monday, November 12, 2001 7:30 AM >To: freebsd-questions@FreeBSD.ORG >Subject: RE: Max number of NIC's and aliases > > >Time for me to chime in on this IP aliasing question. > >Although I've been running a few FreeBSD systems for some time, >they've all only required one or two aliases. > >Now I've made my main web server a FreeBSD box and we're beginning to >add SSL sites at a great rate. My first inclination is to add an IP >alias per SSL site, and I've been wondering myself how many aliases I >can add with ifconfig before things start to break. > >Where should we be reading to use routing instead of aliases in this >context? I'm not connecting what the handbook has to say to my >situation. > Sorry, Albert, (and all) I screwed up on that one. It was late and I didn't explain myself clearly at all, and I was in a hurry. Me bad! What I was referring to works if your running address translation and your server (or servers) is behind a translator. (since most of the time your going to put webservers behind some kind of firewall, you can run translation on this) The limitation to this trick is that you can't use it with SSL-enabled sites since the SSL must have a legitimate IP number attached to it. What you do is all the IP numbers have to be grouped together in a subnet, of course, then you route the entire subnet to the translator. On the translator you install a mapping like this: outside inside IP number:port IP number:port 198.1.2.1:80 ---> 10.10.10.10:1000 198.1.2.2:80 ---> 10.10.10.10:1001 198.1.2.3:80 ---> 10.10.10.10:1002 198.1.2.4:80 ---> 10.10.10.10:1003 198.1.2.5:80 ---> 10.10.10.10:1004 Obviously you have to put the appropriate Listen directive in each of your Apache virtual host sections. This gets around the problem of putting multiple alias interfaces on your webserver and you are pretty unrestricted by any limits of number of interfaces on the webserver. Of course if your translator is crappy then you have a limit to the number of maps. Ted Mittelstaedt tedm@toybox.placo.com Author of: The FreeBSD Corporate Networker's Guide Book website: http://www.freebsd-corp-net-guide.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?004b01c16ce4$2f7f4de0$1401a8c0>