Re: Firewall in Load Balance - Active/Active

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



>Could have a Virtual IP for sending the requests to the two firewalls.
>Could have a ldirectord for gateways. Remember that the ldirectord is
>"load balance" only for ports TCP/UDP.

So you use third box. Solution I presented allows you to do
load-balancing on routers alone. Without ldirector.

>> You can use keepalived [1] to have two virtual gateway IP addresses
>> on the network - GW1 and GW2. Assign half of the clients staticly to
>> GW1,
>>...
>How would I disclose two gateways in the network if I have only one
>DHCP? Could create VLANs. Correct?

Vlans are not required. You can define more then one router-gateway on
one ethernet segment in dhcp server, example from one of my boxes:

shared-network seg1{

  subnet 10.32.0.0 netmask 255.255.254.0 {
   option subnet-mask 255.255.254.0;
   option broadcast-address 10.32.1.255;
   option routers 10.32.1.254;   <---- first gateway definition

   range 10.32.1.128 10.32.1.191;
   }


  subnet xx.xx.177.0 netmask 255.255.255.224 {
   option subnet-mask 255.255.255.224;
   option broadcast-address xx.xx.177.31;
   option routers xx.xx.177.30; <---- second gateway definition
   }
}

Cheers,
Marek Kierdelewicz
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux