IPVS (LVS/NAT) ã¨iptables DNAT targetã®å…±å˜ã«ã¤ã„ã¦èª¿ã¹ãŸ - ntoofu2019-05-02 TL;DR IPVSã¯ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§conntrack(標準ã®connection tracking)を利用ã—ãªã„ ãã®ã›ã„ã§IPVSã«å‡¦ç†ã•ã›ã‚‹ãƒ‘ケットをNATã—ãŸã‚Šã™ã‚‹ã¨æœŸå¾…通り動ã‹ãªã„ã“ã¨ãŒã‚ã‚‹ å¿…è¦ãŒã‚れ㰠/proc/sys/net/ipv4/vs/conntrack (net.ipv4.vs.conntrack) ã‚’è¨å®šã—よㆠ背景 iptablesã® DNAT target㨠IPVS(LVS/NAT構æˆ)ã‚’å…±å˜ã•ã›ã‚‹ã¨ä¸Šæ‰‹ãè¡Œã‹ãªã„ PREROUTING chainã«ãŠã„㦠REDIRECT target ã«ã‚ˆã‚Šãƒãƒ¼ãƒˆç•ªå·ã‚’IPVSã®virtual serviceã®ã‚‚ã®ã«å¤‰æ›ã™ã‚‹ã‚ˆã†ã«è¨å®šã—ãŸå ´åˆ, REDIRECTã•ã‚Œã‚‹ãƒãƒ¼ãƒˆã«å¯¾ã—接続ã™ã‚‹ã¨, 戻り通信(SYNã«å¯¾ã™ã‚‹SYN+ACK)ã®é€ä¿¡å…ƒãƒãƒ¼ãƒˆãŒvirtual serviceã®ã‚‚ã®ã«ãªã‚‹ï¼ˆæœŸå¾…ã•ã‚Œ
LVSã§å®Ÿç¾ã™ã‚‹ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µ - KLablabWiki
{{#tags}}- {{label}}
{{/tags}}