Jan Engelhardt wrote:
Hi,
a user in irc came up with the following scenario:
- home router is connected to two ISPs with different IP addresses and
does round-robin or some other form of packet scheduling.
- in such a setup, one generally uses MARK/CONNMARK to make sure that
packets of a certain connection always leave through the same device
through which the first packet was sent. (This is required to not
break TCP connections.)
But how can we make sure that arbitrary connections which are defined as
related, can be sent through the same device? Think of a website which,
when the user is logged in, requires that all HTTP and HTTPS connections
that will be made by the user, must come from the same IP address.
>
Connection helpers seemed like a good idea at first, since expected
connections inherit the connmark value of the original connection.
However, once an expectation is set up, there is no way to set up
another right after one expectation has been confirmed.
Why not?
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
