Re: does keepalived support tcp redundancy
Adam Cantwell <[email protected]> Tue, 20 Jul 2010 22:58:23 -0600
| Newsgroups | gmane.linux.keepalived.announce |
|---|---|
| Message-ID | <[email protected]> |
hmy wrote, On 7/20/2010 7:55 PM: > hi,guys > > I want know is there have some way to let keeplived > support tcp redundancy ? > host A and B share all tcp connections information. when one them down, > the another host handle the established tcp. the established tcp not > disconnect . > > Linux can do this ? > > Keepalived can't do this. In Linux, you can use netfilter conntrack-tools, libnfnetlink, and libnetfilter_conntrack to accomplish the sharing of session state tables. Combined with Keepalived (for vrrp) and iptables, I've used this method to create redundant firewall clusters. I've been working on some documentation on this type of a setup, but haven't finished it. You can take a look though at http://www.adamcantwell.com/dokuwiki/halinuxfirewall to get pointed in the right direction. Adam ------------------------------------------------------------------------------ This SF.net email is sponsored by Sprint What will you do first with EVO, the first 4G phone? Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first