Re: [LARTC] load balacing with https home banking

["Fabrício F. Feijó" <fabricio.feijo@gmail.com>]

I was reading something about -m conmark, where u can set a mark to each connection and make it persistent at the initial connection link.

On 12/11/06, Marco Berizzi <pupilla@hotmail.com> wrote:

Hello everybody.
I'm running linux 2.6.19 with nth match to
alternatively snat outgoing connections to
two different ip addresses for load balancing
between two adsl lines:
Here is:

$IPTABLES -t nat -A POSTROUTING -s my_ip --protocol tcp -m
multiport --dports 80,443 -m statistic --mode nth --every 2 -j SNAT --to
adslA
$IPTABLES -t nat -A POSTROUTING -s my_ip --protocol tcp -m
multiport --dports 80,443 -j SNAT --to adslB

Things are working pretty good, but some
applications (https home banking for example),
don't work correctly (because the remote
server see two different ip addresses). Is
there any trick to tell iptables to snat
always with the same source ip for the same
destination host? I have also modified SNAT
with SAME, but no luck.

TIA


_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc