Jan Engelhardt wrote: > On Wednesday 2009-01-28 15:58, Pablo Neira Ayuso wrote: > >> This patch adds the iptables cluster match. This match can be used >> to deploy gateway and back-end load-sharing clusters. Assuming that >> all the nodes see all packets >> (see arptables mcmangle target and PKTTYPE iptables targets on how >> to do that), the cluster match decides if this node has to handle a >> packet given: > > Is not this what CLUSTERIP is essentially supposed to do? No, you can't deploy load-sharing setups for gateways as the -d parameter is mandatory, CLUSTERIP only works for back-end nodes and have a couple of significant problems. Indeed, these stuff supersedes CLUSTERIP. -- "Los honestos son inadaptados sociales" -- Les Luthiers -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html