Re: intended behavior of REDIRECT

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tuesday 2008-04-15 20:10, Luke Elliott wrote:
>
> iptables -t nat -A PREROUTING -p tcp --dport 9002 -j REDIRECT --to-ports
> 9003-9004
>
> I'd like to balance connections to port 9002 across the two servers on ports
> 9003 and 9004. Using the --random (or --random 1 with iptables 1.3.8...) option
> works, but what should the non-random rule actually do?

I'd rather use the two rules:
1. -m statistic --mode nth --every 2 -j REDIRECT --to-port 9003 +
2. (unconditional)                   -j REDIRECT --to-port 9004

Which will reliably RR over the ports.

--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux