Mailing List Archive

It is my understanding that if you use special 'port 0', all traffic to
VIP is forwarded to real servers, this should catch ports 80 and 443.
--
Michael Brown

On Wed, 3 Jan
2001, Wayne wrote:

> In the process of setting up NAT load balancing,
> is there a easy way to relating server in both port 80 and
> port 443?
>
> Say I have two farms, each with same three servers.
> One farm load balancing HTTP requests and another
> farm load balancing HTTPS farms. To make sure the
> user in the persistent mode connected to the HTTP
> server always go to the same server for HTTPS service,
> we would like to have some way to relate the services
> between the two farms, is there a easy way to do it?
>
> If not, what else can we do? Thanks so much!
>
>
> _______________________________________________
> LinuxVirtualServer.org mailing list - lvs-users@LinuxVirtualServer.org
> Send requests to lvs-users-request@LinuxVirtualServer.org
> or go to http://www.in-addr.de/mailman/listinfo/lvs-users
>

Wayne wrote:
>
> In the process of setting up NAT load balancing,
> is there a easy way to relating server in both port 80 and
> port 443?
>
> Say I have two farms, each with same three servers.
> One farm load balancing HTTP requests and another
> farm load balancing HTTPS farms. To make sure the
> user in the persistent mode connected to the HTTP
> server always go to the same server for HTTPS service,
> we would like to have some way to relate the services
> between the two farms, is there a easy way to do it?
>
> If not, what else can we do? Thanks so much!

:) I just wrote about it today. You should get the idea with the following
explanation.

Two possibilities to solve this ``problem'' with LVS:
1. Use port 0 in your setup. (adv.: easy to set up and easy understand)
2. Use fwmark and group them together. (adv.: finer port granularity possible)

Example (1):
------------
ipvsadm -A -t 192.168.1.100:0 -s wlc -p 333 -M 255.255.255.255
ipvsadm -a -t 192.168.1.100:0 -r 192.168.1.1 -g -w 1
ipvsadm -a -t 192.168.1.100:0 -r 192.168.1.2 -g -w 1

Example (2):
------------
ipchains -A input -j ACCEPT -p tcp -d 192.168.1.100/32 80 -m 1 -l
ipchains -A input -j ACCEPT -p tcp -d 192.168.1.100/32 443 -m 1 -l
ipvsadm -A -f 1 -s wlc -p 333 -M 255.255.255.255
ipvsadm -a -f 1 -r 192.168.1.1 -g -w 1
ipvsadm -a -f 1 -r 192.168.1.2 -g -w 1

have phun,
Roberto Nibali, ratz


--
mailto: `echo NrOatSz@tPacA.cMh | sed 's/[NOSPAM]//g'`