windo at p6drad-teel
Apr 15, 2008, 11:08 PM
Views: 442
Permalink
|
|
[lvs-users] netfilter match for ipvs connections
|
|
Yo!
I'll ask again, as I think someone might yet have an opinion on this:
Would it make sense in having a netfilter match that would look up
connections on ipvs connection table? That would allow for filtering
outbound packets in FORWARD without having to export the connections to
conntrack and for a more consistent action as the outbound check would
be the same as the inbound check (based on ipvs knowledge of the
connection).
And also, are there maybe peculiarities of ipvs connection tables that
would make this infeasible? I'd be willing to look into it, if there was
some opinion of it making sense.
Siim
_______________________________________________
LinuxVirtualServer.org mailing list - lvs-users[at]LinuxVirtualServer.org
Send requests to lvs-users-request[at]LinuxVirtualServer.org
or go to http://lists.graemef.net/mailman/listinfo/lvs-users
|
[lvs-users] netfilter match for ipvs connections
