2009/8/5 Alex 'CAVE' Cernat <c...@cernat.ro>:
>
>>
>> Stie connection tracking-ul NAT-ului si odata ce e established nu trimite
>> pachete prin alta interfata.
>>
> Din cate imi aduc aminte routarea se face inainte de SNAT, si nu stiu sigur
> cat de dependente sau independente erau ultima data.
> Dar ma rog, n-am apucat sa testez cum trebuie arhitectura asta cu 2 gw-uri
> si fara sa precizez explicit care pachet pe unde sa o ia. Dar daca zici ca
> la tine merge fara probleme ....
>

Intr-adevar, routarea se face inainte de SNAT. Dar kernelul are un
"route cache", care iti permite sa faci round-robin sau random
load-balancing pe N gatewayuri, fara sa-ti strici conexiunile TCP.
Practic decizia de routing se ia la primul pachet al conexiunii, dupa
care se tine in cache.

"When determining the route by which to send a packet, the kernel
always consults the routing cache first. The routing cache is a hash
table used for quick access to recently used routes. If the kernel
finds an entry in the routing cache, the corresponding entry will be
used. If there is no entry in the routing cache, the kernel begins the
process of route selection." (de aici:
http://linux-ip.net/html/routing-selection.html ) sau googleaza "linux
kernel route cache".

-- 
www.flo.ro

_______________________________________________
RLUG mailing list
RLUG@lists.lug.ro
http://lists.lug.ro/mailman/listinfo/rlug

Reply via email to