Re: pf and load balancing some webservers

2007-01-18 Thread Pierre-Yves Ritschard
PS.: although wrong thread, any chance to use the brand new hoststated in OpenBSD 4.0 ? If I get it via CVS, will it build? I don't like the idea to upgrade my production box to -CURRENT at all ;) What you can do is get the 4.0 source, then just checkout latest hoststated and hoststatectl direc

Re: pf and load balancing some webservers

2007-01-18 Thread Marian Hettwer
Hej Stuart, On Thu, 18 Jan 2007 09:52:15 +, Stuart Henderson <[EMAIL PROTECTED]> wrote: > On 2007/01/18 09:17, Marian Hettwer wrote: >> That doesn't make sense to me... why should the destination reply > directly to the origin? > > That's because rdr only rewrites the destination address, not

Re: pf and load balancing some webservers

2007-01-18 Thread Marian Hettwer
Hej Bryan, On Wed, 17 Jan 2007 16:32:43 -0500, Bryan Chapman <[EMAIL PROTECTED]> wrote: >> >> > Do you have a pass rule along with that rdr rule? Nope. But IIRC it's pass in and pass out anyway by default. And I have no block rule (yet) :) Correct me if I'm wrong... ./Marian

Re: pf and load balancing some webservers

2007-01-17 Thread Bryan Chapman
Marian Hettwer wrote: my pf.conf ext_if="fxp0" #int_if="int0" set skip on lo scrub in web_servers = "{ 193.99.144.85,66.135.208.93 }" rdr on $ext_if proto tcp from any to any port 80 -> $web_servers \ round-robin sticky-address Do you have a pass rule along with that rdr rule?

pf and load balancing some webservers

2007-01-17 Thread Marian Hettwer
Hi All, I tried to setup a pf(4) based load balancer for some webservers. I did follow the instructions from openbsd.org's pf FAQ. However, I seem to make a stupid mistake and I can't see which one. My Setup: - OpenBSD 4.0 box, should be the load balancer - 2 other boxes with official IP address