Re: NAT and loopback
Jim Klimov <[email protected]>
| Newsgroups | gmane.comp.security.firewalls.ipfilter |
|---|---|
| Organization | JSC COS/HT |
| Message-ID | <[email protected]> |
Hello Miguel, Alas, I have no idea on directly solving your problem, and hope that the list's experienced veterans can help you better. But I have an idea to this: "But I just want to do some local L4 load balancing. Any idea on how that can be done? ". Sorry if my suggestion is too far-fetched - but in case it doesn't work out with IPF, did you consider daemon-based load-balancing? I'm sure it is not too difficult (although inefficient for heavy/frequent loads) to make an inetd service which would spawn tunnels (netcat's?) to one or another destination. This can be dome perhaps via some one-liner script (load-balancing to two targets i.e. by oddity of the current second of time). Some more efficient approach would be to find a tunneling software which spawns LWP threads within one OS process. If this is some specific protocol (like SMTP, LDAP, HTTP) there are many load-balancing proxies, good and bad. Protocol- specific proxies are also beneficial in that they can usually detect dead back-end servers and transparently direct the clients to live servers. If anything else, some such proxies are available in source (scripted or C/C++) and can become a basis for your protocol's new load-balancer ;) Hope this helps, Jim [email protected] пишет: > Hi Phil > > It's on AIX. > But I just want to do some local L4 load balancing. Any idea on how that can be done? > > > Met vriendelijke groet > Best regards > Bien à vous > > Miguel SANDERS > ArcelorMittal Gent > > UNIX Systems & Storage > IT Supply Western Europe | John Kennedylaan 51 > B-9042 Gent > > T +32 9 347 3538 | F +32 9 347 4901 | M +32478 805 023 > E [email protected] > www.arcelormittal.com/gent > > -----Oorspronkelijk bericht----- > Van: [email protected] [mailto:[email protected]] Namens Phil Dibowitz > Verzonden: maandag 25 mei 2009 22:16 > Aan: SANDERS Miguel > CC: [email protected] > Onderwerp: Re: NAT and loopback > > [email protected] wrote: >> Hi guys >> >> I would like to create a local L4 load balancing so that the following >> is true (the host has IP address 10.226.32.111): >> >> TCP connection to 127.0.0.1/port 1500 on the host gets redirected to >> 10.226.33.150/1500 the first time. > > What OS? As far as I know, you can't do anything on the loopback interface in Solaris since it's not a real interface. > -- +============================================================+ | | | Климов Евгений, Jim Klimov | | технический директор CTO | | ЗАО "ЦОС и ВТ" JSC COS&HT | | | | +7-903-7705859 (cellular) mailto:[email protected] | | CC:[email protected],[email protected] | +============================================================+ | () ascii ribbon campaign - against html mail | | /\ - against microsoft attachments | +============================================================+