Re: fail in the connmark load-balancing

[Andrew Beverley <andy@xxxxxxxxxxx>]

On Sat, 2012-02-11 at 18:19 -0200, Usuário do Sistema wrote:
> Hello,
> 
> I've just deployed the load balance in the my firewall iptables
> 1.4.3.1 as How to below:
> 
> http://www.sysresccd.org/Sysresccd-Networking-EN-Iptables-and-netfilter-load-balancing-using-connmark

> I need add follow line to occur the load balance ??

[...]

> ip route add default scope global equalize nexthop via x.y.t.z1 weight
> 2  nexthop via x.y.t.z2 weight 2

No, you don't need that line when doing load sharing with the method
described above. That will break the sharing per-connection, which is
obviously what you are trying to achieve.

If it's not working, there must be another problem. Please show the
output of "ip rule show", "ip ro" and "ip ro show table <table>" for
each of your tables where <table> is the name of the tables.

Andy



--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html