Hello,

 

Does Shorewall support hash for destination load balancing or is only round-robin available? In shorewall documentation I found mention only about round-robin destination balancing. See documantation: http://www.shorewall.net/Documentation.htm

 

DEST

Describes the destination host(s) to which the rule applies. May take most of the forms described above for SOURCE plus the following two additional forms:

·        An IP address followed by a colon and the port number that the server is listening on (service names from /etc/services are not allowed - example loc:192.168.1.3:80).

·        A single port number (again, service names are not allowed) -- this form is only allowed if the ACTION is REDIRECT and refers to a server running on the firewall itself and listening on the specified port.

Restrictions:

·        MAC addresses may not be specified.

·        In DNAT rules, only IP addresses may be given -- DNS names are not permitted.

·        You may not specify both an IP address and an interface name in the DEST column.

Like in the SOURCE column, a range of IP addresses may be specified in the DEST column as <first address>-<last address>. When the ACTION is DNAT or DNAT-, connections will be assigned to the addresses in the range in a round-robin fashion (load-balancing).

 

 

Sincerely,

--------------------------------------------
Radovan Jablonovsky
Database Architect/DBA
Arrow Transportation Systems Inc.
Tel: (250) 571-7773
Email: [EMAIL PROTECTED]
WWW: www.arrowtransportation.com

 

 

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to