From owner-freebsd-net Mon Jan 27 17:25: 7 2003 Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 03A5937B401; Mon, 27 Jan 2003 17:25:06 -0800 (PST) Received: from bluejay.mail.pas.earthlink.net (bluejay.mail.pas.earthlink.net [207.217.120.218]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7E4C343F43; Mon, 27 Jan 2003 17:25:05 -0800 (PST) (envelope-from tlambert2@mindspring.com) Received: from pool0350.cvx22-bradley.dialup.earthlink.net ([209.179.199.95] helo=mindspring.com) by bluejay.mail.pas.earthlink.net with asmtp (SSLv3:RC4-MD5:128) (Exim 3.33 #1) id 18dKUm-0001FE-00; Mon, 27 Jan 2003 17:25:01 -0800 Message-ID: <3E35DB45.4B429192@mindspring.com> Date: Mon, 27 Jan 2003 17:22:13 -0800 From: Terry Lambert X-Mailer: Mozilla 4.79 [en] (Win98; U) X-Accept-Language: en MIME-Version: 1.0 To: John David Duncan Cc: freebsd-current@freebsd.org, freebsd-net@freebsd.org Subject: Re: Direct Server Return and FreeBSD 5 References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-ELNK-Trace: b1a02af9316fbb217a47c185c03b154d40683398e744b8a4c3a30819a42dc93166106ce2853add8a350badd9bab72f9c350badd9bab72f9c350badd9bab72f9c Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org John David Duncan wrote: > There's a load balancing configuration known as direct server return > (DSR), in which packets pass from the client through the load balancer to > the server, but then the replies from the server go directly to the client > (bypassing the load balancer). The way this works is that the load > balancer sends the server an IP packet with the virtual IP address as its > destination addr, inside an ethernet frame whose destination is the real > MAC addr of the server. The server replies with a normal packet using the > VIP as the source addr. > > The usual way to configure a BSD box to work this way is to bring up the > VIP as an alias on the loopback address, like this: > ifconfig lo0 add 1.2.3.4 netmask 0xffffff00 > > As far as I can tell from my testing, this trick just doesn't work on my > box running -CURRENT. In tcpdump I see packets coming in but none > going out. > > Does anybody know why, or what I would have to do to change the behavior? Rather than actually fixing the routing code, FreeBSD did a hack to save the inbound route for outbound responses, do the response goes out on the same interface the request came in on. It does not check for equivalency, when it does this. See the discussion in the -current list archives, a month or so ago. -- Terry To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message