Mailing List Archive

Hello,

On Thu, 5 Nov 2015, Michael Schwartzkopff wrote:

> Hi,
>
> I found several ways to implement source NAT on the LVS. What is the state of
> the art way to do this? Using plain iptables or use the ipvs module of
> iptables?
>
> As far as I understood, with plain iptables, I need to enable
> net.vs.conntrack?

Yes, if Netfilter's conntrack is enabled the faster
option for IPVS is to also enable net.vs.conntrack [1]. It allows
stateful filtering (-m state) and iptables NAT. There is even
specific match for IPVS: net/netfilter/xt_ipvs.c (-m ipvs).

[1] http://marc.info/?t=134728825000003&r=1&w=2

Regards

--
Julian Anastasov <ja@ssi.bg>

_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users@LinuxVirtualServer.org
Send requests to lvs-users-request@LinuxVirtualServer.org
or go to http://lists.graemef.net/mailman/listinfo/lvs-users