|
[Sorry for my poor English as my mother tongue is
not English..]
Hi all,
I am planning to setup a load balancer with
IPFilter on FreeBSD. Usually load balancers should be responsible for
diverting traffic to different web servers, but I want something
more. I would like to know if there is any
methods in IPFilter to "raise" the priority of certain packets if they are found
in a list? Say, I want to divert
traffic from "137.189.0.0 to 137.189.255.255" and "61.4.0.0 to
61.4.63.255" to another dedicated web server (which has faster cpu, faster
disks..). If this is possible, what can I do in IPFilter to achieve this? Do I
need 200 diverting rules of something similar if I have 200 of these
network address pairs? If not, does anyone here have other solutions to
this?
By the way, is it possible to mount only 1 public
routable address (i.e. not those 10.0.0.1 IPs) and then make use of IPFilter to
balance the traffic among the web servers? Actually what I want is, something
like the Linux Virtual Server + IP Tunneling which does not involve NAT, because
it seems to me that (i) nat is troublesome and annoying, (ii) nat'ed networks
cannot scale well, (iii) "internal machines" (i.e. those behind the NAT machine)
cannot access the NAT machine by the "public address" of the NAT machine, (iv)
performance is a little bit degraded?
Also, what could be the ideal hardware for the
IPFilter machine mentioned above? Does it need to be a dual cpu machine so that
IPFilter can process the "high priority IP list" faster? Does it need a lot of
ram to remember all the IP in the "high priority list" and the packet states
information? (Sorry the choices for CPU have to be either Pentium4 /
Athlon / Pentium III but not any older CPUs)
Thanks for your very kind attention and
help.
Best regards
Michael
|
