On Thu, Oct 21, 2004 at 12:38:28AM +0200, Harald Welte wrote:
Hi Dave!
This is the 'CLUSTERIP' target for iptables, this time no core kernel
changes required, please apply.
This enables you to build a static load sharing cluster between multiple
nodes - without the requirement to have a load balancer. It uses a
series of [evil] tricks like replying with linklayer multicast addresses
to ARP requests, and using CONNMARK for stateful blocking all traffic
not intended for the local node.
Apart from the usual netfilter-specific file additions and
Kconfig/Makefile patches, this needs to export proc_file_operations in
order to get the reference counting of certain data objects right. I
hope this change is acceptable.
Signed-off-by: Harald Welte <laforge@xxxxxxxxxxxxx>
--
- Harald Welte <laforge@xxxxxxxxxxxxx> http://www.netfilter.org/
============================================================================
"Fragmentation is like classful addressing -- an interesting early
architectural error that shows how much experimentation was going
on while IP was being designed." -- Paul Vixie
2.6.9-clusterip.patch
Description: Text document
signature.asc
Description: Digital signature
|