Hi Dave!
This is the second patch, adding the 'CLUSTERIP' target to iptables. It
depends on the first 'CONNMARK' patch.
This enables you to build a static load sharing cluster between multiple
nodes - without the requirement to have a load balancer. It uses a
series of [evil] tricks like replying with linklayer multicast addresses
to ARP requests, and using CONNMARK for stateful blocking all traffic
not intended for the local node.
Apart from the usual netfilter-specific file additions and
Kconfig/Makefile patches, this needs to export proc_file_operations in
order to get the reference counting of certain data objects right. I
hope this change is acceptable.
Signed-off-by: Harald Welte <laforge@xxxxxxxxxxxxx>
--
- Harald Welte <laforge@xxxxxxxxxxxxx> http://www.netfilter.org/
============================================================================
"Fragmentation is like classful addressing -- an interesting early
architectural error that shows how much experimentation was going
on while IP was being designed." -- Paul Vixie
2.6.9-clusterip.patch
Description: Text document
signature.asc
Description: Digital signature
|