Re: keepalived 1.1.20 nat not working

$quoted_author =3D "Thomas Els=E4=DFer" ;
> =

> OK. I have now only working with hardware lb. And here i say - i would
> like nat the Loadbalancer change the client address with address of the
> LB device or what i like.

IPVS (and in turn keepalived) does not handle this for you. =


 =

> OK i must use iptables to masquerade the traffic to real servers.
> Understand i right?

You would have to try an SNAT on the POSTROUTING chain, but I'm not sure how
this would interact with the connection tracking iptables is already doing
for IPVS.

I've never tried this as we've always wanted the client's IP to end up in
the logs on the real server.

cheers
Marty

---------------------------------------------------------------------------=
---
Virtualization is moving to the mainstream and overtaking non-virtualized
environment for deploying applications. Does it make network security =

easier or more difficult to achieve? Read this whitepaper to separate the =

two and get a better understanding.
http://p.sf.net/sfu/hp-phase2-d2d