В Пнд, 04/08/2008 в 11:48 -0400, Barry A Rich пишет: > > -----Original Message----- > > From: Покотиленко Костик [mailto:casper@xxxxxxxxxxxx] > > Sent: Monday, August 04, 2008 10:41 AM > > To: barich@xxxxxxxxxxxxxx > > Cc: 'Mail List - Netfilter' > > Subject: RE: UDP stream load balancing across multiple uplinks > > > > В Пнд, 04/08/2008 в 09:57 -0400, Barry A Rich пишет: > > > > -----Original Message----- > > > > From: netfilter-owner@xxxxxxxxxxxxxxx > > > [mailto:netfilter-owner@xxxxxxxxxxxxxxx] > > > > On Behalf Of ??????????? ?????? > > > > Sent: Monday, August 04, 2008 3:26 AM > > > > To: barich@xxxxxxxxxxxxxx > > > > Cc: 'Mail List - Netfilter' > > > > Subject: RE: UDP stream load balancing across multiple uplinks > > > > > > > > В Пнд, 28/07/2008 в 09:33 -0400, Barry A Rich пишет: > > > > > > -----Original Message----- > > > > > > From: netfilter-owner@xxxxxxxxxxxxxxx > > > > > > [mailto:netfilter-owner@xxxxxxxxxxxxxxx] > > > > > > On Behalf Of Grant Taylor > > > > > > Sent: Friday, July 25, 2008 11:10 AM > > > > > > > > > > > > Given that the source IP of your packets can change mid stream, > you > > > > > > could use the "nth" match extension. Using "nth" you would match > > > > > > packets to decide how to mark them and then use the mark to > determine > > > > > > what routing table to use which would ultimately decide which > outbound > > > > > > path to use. > > > > > > > > > > The following setup does load balancing across the uplinks. However, > the > > > > > source address in the outgoing packets is not being SNAT'ed. Any > > > > > suggestions? > > > > > > > > Only first packet of udp "connection" is reaching the rule in the nat > > > > table and does the job, since nat occurs for all packets in this > > > > connection rest of rules would not match. > > > > > > I understand better. I removed the following rule: > > > > > > #iptables -t raw -A PREROUTING -i eth0 -p udp --sport $SPORT -j NOTRACK > > > > > > The connection is tracked and the outgoing UDP packets are SNAT-ed. > However, > > > the source address for all UDP packets is the IP address of the uplink > > > assigned to the connection (regardless of the uplink they actually are > > > sent). > > > > > > Is there a way to SNAT without connection tracking? > > > > Sure: > > > > http://linux-ip.net/html/nat-stateless.html > > Stateless NAT with IPROUTE2 does not appear to be selective. I only want to > SNAT UDP packets with a specific source port. Maybe it is possible to use FWMARK, not sure... -- Покотиленко Костик <casper@xxxxxxxxxxxx> -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
