diff options
author | Hannes Eder <heder@google.com> | 2010-07-23 12:46:32 +0200 |
---|---|---|
committer | Patrick McHardy <kaber@trash.net> | 2010-07-23 12:46:32 +0200 |
commit | 7b215ffc3885a38182d3d49ceb41d0a81c3e041a (patch) | |
tree | 65172fb8eec92848efee3b76f32ff3dabc4c84fa /net/netfilter/ipvs/Kconfig | |
parent | 9c3e1c39679144c250dda95098333ecb5f1f407a (diff) | |
download | op-kernel-dev-7b215ffc3885a38182d3d49ceb41d0a81c3e041a.zip op-kernel-dev-7b215ffc3885a38182d3d49ceb41d0a81c3e041a.tar.gz |
IPVS: make friends with nf_conntrack
Update the nf_conntrack tuple in reply direction, as we will see
traffic from the real server (RIP) to the client (CIP). Once this is
done we can use netfilters SNAT in POSTROUTING, especially with
xt_ipvs, to do source NAT, e.g.:
% iptables -t nat -A POSTROUTING -m ipvs --vaddr 192.168.100.30/32 --vport 80 \
-j SNAT --to-source 192.168.10.10
[ minor fixes by Simon Horman <horms@verge.net.au> ]
Signed-off-by: Hannes Eder <heder@google.com>
Signed-off-by: Simon Horman <horms@verge.net.au>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Diffstat (limited to 'net/netfilter/ipvs/Kconfig')
-rw-r--r-- | net/netfilter/ipvs/Kconfig | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/netfilter/ipvs/Kconfig b/net/netfilter/ipvs/Kconfig index d80b41a..36624449 100644 --- a/net/netfilter/ipvs/Kconfig +++ b/net/netfilter/ipvs/Kconfig @@ -3,7 +3,7 @@ # menuconfig IP_VS tristate "IP virtual server support" - depends on NET && INET && NETFILTER + depends on NET && INET && NETFILTER && NF_CONNTRACK ---help--- IP Virtual Server support will let you build a high-performance virtual server based on cluster of two or more real servers. This |