From owner-freebsd-pf@FreeBSD.ORG Fri Apr 25 16:02:12 2008 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DABE41065670 for ; Fri, 25 Apr 2008 16:02:12 +0000 (UTC) (envelope-from phoemix@harmless.hu) Received: from marvin.harmless.hu (www.ssl.harmless.hu [195.56.55.205]) by mx1.freebsd.org (Postfix) with ESMTP id 7D3AA8FC25 for ; Fri, 25 Apr 2008 16:02:12 +0000 (UTC) (envelope-from phoemix@harmless.hu) Received: from pool-4816.adsl.interware.hu ([213.178.118.208] helo=mort.in.publishing.hu) by marvin.harmless.hu with esmtpa (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JpQNF-0007pG-Aa; Fri, 25 Apr 2008 18:02:09 +0200 Date: Fri, 25 Apr 2008 18:02:05 +0200 From: CZUCZY Gergely To: Mohacsi Janos Message-ID: <20080425180205.2edd4d37@mort.in.publishing.hu> In-Reply-To: <20080425170324.H16673@mignon.ki.iif.hu> References: <402f78990804242338v5c2d6e95yaf73382878f8c26@mail.gmail.com> <20080425092706.2a977670@twoflower.in.publishing.hu> <20080425170324.H16673@mignon.ki.iif.hu> Organization: Harmless Digital Bt X-Mailer: Claws Mail 3.3.1 (GTK+ 2.12.1; i386-portbld-freebsd6.3) Mime-Version: 1.0 Content-Type: multipart/signed; boundary="Sig_/RYLq+W9ijaeM4BUTW=G3_XQ"; protocol="application/pgp-signature"; micalg=PGP-SHA1 Sender: Czuczy Gergely Cc: freebsd-pf@freebsd.org Subject: Re: pf (+ relayd?) as lvs replacement X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Apr 2008 16:02:12 -0000 --Sig_/RYLq+W9ijaeM4BUTW=G3_XQ Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Adding IPv6 support to a project like this is usually a trivial thing to do, nothing special. IMHO the cause of the lack of this feature in many projects is the lack of requirement. Nobody tells the developers that IPv6 support is needed. So, not a big deal. On Fri, 25 Apr 2008 17:06:21 +0200 (CEST) Mohacsi Janos wrote: >=20 >=20 >=20 > On Fri, 25 Apr 2008, CZUCZY Gergely wrote: >=20 > > Hello, > > > > A somewhat similar can be achived using relayd, but this kind of > > load balancing shouldn't be done on L2/L3 level. This kind of load > > balancing should be done on Layer7 with some application level load > > balancers. That way you can also do more then this (like sanitizing > > the requests before they get to the actual servers). > > > > Some projects exists out there to do this, like pound[1], or also > > nginx has some features for this propose, and even apache2.2 is > > being extended into this direction. >=20 > Most of these projects don't have IPv6 support, whil pf has IPv6 > support builtin. We are using pf for load balancing HTTP for more > than a years now, successfully. >=20 > Best Regards, >=20 >=20 > Janos Mohacsi > Network Engineer, Research Associate, Head of Network Planning and > Projects NIIF/HUNGARNET, HUNGARY > Key 70EF9882: DEC2 C685 1ED4 C95A 145F 4300 6F64 7B00 70EF 9882 >=20 --=20 Sincerely, Gergely CZUCZY, Harmless Digital mailto: gergely.czuczy@harmless.hu Legacy software is software that works. --Sig_/RYLq+W9ijaeM4BUTW=G3_XQ Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4 (FreeBSD) iD8DBQFIEgCAzrC0WyuMkpsRAmIcAJwOYVkWAIX3bJHpWqIcAZCbRuzEFwCfYw3D ZvdV4faVfNhjHj4e0YtbOnE= =AE5+ -----END PGP SIGNATURE----- --Sig_/RYLq+W9ijaeM4BUTW=G3_XQ--