Hi Steffen, If I understand the question right to give your real servers internet access you should be able to enable ip forwarding then use a masquerade rule.
You can use "iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE " then "echo “1” > /proc/sys/net/ipv4/ip_forward" . Ben On 12 November 2015 at 06:54, HAproxy <[email protected]> wrote: > Trying to make a two armed transparent setup like mentioned here > <http://www.loadbalancer.org/blog/load-balancing-methods> to do both > transparently L4 [SSL] DR + L7 SSL termination load balanced services. > > I’m having the load balanced services working, but I wont the real servers > to be able to access the public internet and to have other non-balanced > services like management ssh access through HAproxy VMs to my real servers. > > Question is now how do I possible masquerade the real servers to access > public internet through my active/passiveHAproxies, currently setup like > mentioned here <http://www.devconsole.info/?p=1294>. Any hints/URLs are > welcomed? > > TIA > > /Steffen > -- LOADBALANCER.ORG LTD. www.loadbalancer.org [email protected]
