From owner-freebsd-pf@FreeBSD.ORG Thu Jan 14 20:07:35 2010 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id F37E11065694 for ; Thu, 14 Jan 2010 20:07:34 +0000 (UTC) (envelope-from 000.fbsd@quip.cz) Received: from elsa.codelab.cz (elsa.codelab.cz [94.124.105.4]) by mx1.freebsd.org (Postfix) with ESMTP id B3B988FC12 for ; Thu, 14 Jan 2010 20:07:34 +0000 (UTC) Received: from elsa.codelab.cz (localhost.codelab.cz [127.0.0.1]) by elsa.codelab.cz (Postfix) with ESMTP id 6117819E047; Thu, 14 Jan 2010 21:07:33 +0100 (CET) Received: from [192.168.1.2] (r5bb235.net.upc.cz [86.49.61.235]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by elsa.codelab.cz (Postfix) with ESMTPSA id 2880719E019; Thu, 14 Jan 2010 21:07:31 +0100 (CET) Message-ID: <4B4F7982.3070207@quip.cz> Date: Thu, 14 Jan 2010 21:07:30 +0100 From: Miroslav Lachman <000.fbsd@quip.cz> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9.1.7) Gecko/20100104 SeaMonkey/2.0.2 MIME-Version: 1.0 To: kevin References: <010801ca954d$db567fe0$92037fa0$@com> In-Reply-To: <010801ca954d$db567fe0$92037fa0$@com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-pf@freebsd.org Subject: Re: pf > round robin X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Jan 2010 20:07:35 -0000 kevin wrote: > Hello, > > I'm sure this topic has come up previously, however I'm just curious if > FreeBSD's PF + round robin load balancing to tcp port 80 has any status > checking built in. No, there is not. PF is packet filter, not swiss army knife > That is to say, if server1's tcp 80 is not even responsive, does PF still > send traffic to it? It would be great if this was built in. If not (as I > suspect), what alternatives could be had to implement some sort of status > checking, while still using PF's round-robing directive? There is net/relayd in ports (from OpenBSD project, as PF) to things like this. Miroslav Lachman