29. LVS: Running a firewall on the director: Interaction between LVS and netfilter (iptables).

29. LVS: Running a firewall on the director: Interaction between LVS and netfilter (iptables). May 2004: This chapter has been rewritten. Before the arrival of the Antefacto patches, it was not possible to run arbitary iptables rules for ip_vs controlled packets on a director. Hence you couldn't run a firewall on the director and we told people to put their firewall on a separate box. Julian then

[iwsky]

ここの Fig 2.がiptablesの動きを理解するのに超役立つのでメモ。 Figure 2. Diagram from "Linux Firewalls Using iptables"

[doublenegative]

Linux Virtual Server / iptables の状態遷移図有