NAT: ip rule FROM seems ignored

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi everyone,

I'm not an iproute2 or iptables guru, so please excuse me if I say
something wrong.

I have a server with Debian Squeeze (2.6.32) which needs to act as a
load balancer.

It needs to do NAT with backends servers.

Until there, it is working, I have packet going out my server to the
client IP address.

The problem is that this packet is not sent to the right gateway !

Here is my IP config :

eth0 : 10.111.13.41/16

eth0:vip : 10.111.13.40/16

eth1 : 10.108.13.111/16

eth1:sina1-1 : 10.108.240.164/16

eth1:sina1-2 : 10.108.240.165/16

eth1:sina1-3 : 10.108.240.166/16

eth1:sina1-4 : 10.108.240.167/16

eth1:sina1-5 : 10.108.240.168/16

I have a "global" system gateway at 10.111.0.253.

When my server is interrogated at 10.108.240.164, it needs to send the
reply to 10.108.0.111.

So here is my config :

root@lb04-1:~# ip rule list
0:    from all lookup local
32758:    from 10.108.240.164 lookup table_eth1
32759:    from 10.108.240.167 lookup table_eth1
32760:    from 10.108.240.166 lookup table_eth1
32761:    from 10.108.240.165 lookup table_eth1
32762:    from 10.108.240.168 lookup table_eth1
32763:    from 10.111.13.40 lookup table_eth0
32764:    from 10.108.13.111 lookup table_eth1
32765:    from 10.111.13.41 lookup table_eth0
32766:    from all lookup main
32767:    from all lookup default

root@lb04-1:~# ip route show table table_eth1
10.108.0.0/16 dev eth1  scope link  src 10.108.13.111
default via 10.108.0.111 dev eth1


Is it, or not, the right way to do this ?

My reply packet from 10.108.240.164 is sent to 10.111.0.254... :(

Can someone has an idea of what I'm doing wrong ?

Thank you a lot.


--
To unsubscribe from this list: send the line "unsubscribe lartc" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux