On Wed, Apr 27, 2022 at 02:59:42PM -0400, Bryan Seitz wrote:
> Chrony devs,
> 
>   We’d like to migrate to a load balancer using direct server return with 
> Chrony. The VIP address is assigned to the LO interface and we are using an 
> IPIP tunnel.  The problem is that Chrony receives the packet on the tunl0 
> (pip) interface and sends the reply (DSR with real client IP destination) 
> back out the tunl0 interface.  The packet needs to go out eth0 since that is 
> how things are routed properly.  ISC Kea has an option to do this however I 
> cannot find an equivalent with Chrony.  Is there a solution or is it possible 
> to add similar functionality to Chrony?

What version of chrony are you using?

In 4.0 there was this change:
* Don't set interface for NTP responses to allow asymmetric routing             
                                     

which was intended for cases like you describe.

-- 
Miroslav Lichvar


-- 
To unsubscribe email chrony-dev-requ...@chrony.tuxfamily.org with "unsubscribe" 
in the subject.
For help email chrony-dev-requ...@chrony.tuxfamily.org with "help" in the 
subject.
Trouble?  Email listmas...@chrony.tuxfamily.org.

Reply via email to