Date: Mon, 27 Jan 2003 17:20:14 -0800 From: Paul Saab <ps@mu.org> To: John David Duncan <jdd@greatschools.net> Cc: freebsd-current@freebsd.org, freebsd-net@freebsd.org Subject: Re: Direct Server Return and FreeBSD 5 Message-ID: <20030128012014.GA30287@elvis.mu.org> In-Reply-To: <Pine.BSF.4.52.0301271651080.6700@great4.greatschools.net> References: <Pine.BSF.4.52.0301271651080.6700@great4.greatschools.net>
next in thread | previous in thread | raw e-mail | index | archive | help
You need to set net.inet.ip.check_interface=0 John David Duncan (jdd@greatschools.net) wrote: > > There's a load balancing configuration known as direct server return > (DSR), in which packets pass from the client through the load balancer to > the server, but then the replies from the server go directly to the client > (bypassing the load balancer). The way this works is that the load > balancer sends the server an IP packet with the virtual IP address as its > destination addr, inside an ethernet frame whose destination is the real > MAC addr of the server. The server replies with a normal packet using the > VIP as the source addr. > > The usual way to configure a BSD box to work this way is to bring up the > VIP as an alias on the loopback address, like this: > ifconfig lo0 add 1.2.3.4 netmask 0xffffff00 > > As far as I can tell from my testing, this trick just doesn't work on my > box running -CURRENT. In tcpdump I see packets coming in but none > going out. > > Does anybody know why, or what I would have to do to change the behavior? > > - JD > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-current" in the body of the message -- Paul Saab Technical Yahoo ps@mu.org - ps@yahoo-inc.com - ps@freebsd.org Do You .. uhh .. Yahoo!? To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030128012014.GA30287>