I think you would not have to blow up the pf code itself too much.
Simply put, take a look at the packet in ip_input.c.
Look, if it should be destinated to some of your real server.
Calculate the next real server to give to packet to based
on some infos (connections, load, etc).
Create a (temporary) pf-nat rule.
I think somethink like that could be possible.
(Oversimplyfied, I know).
But as far as I understand the BSD kernel and the pf package it should work.
 
----- Original Message -----
Sent: Friday, June 20, 2003 7:05 PM
Subject: Re: Linux virtual server competition

I'm not an OpenBSD developer, but in my opinion, I'd intergrate it as
a standalone application, because you will want it to be very flexible
eventually, and you don't want to bloat the pf code too much... since
it needs to be a very fast responding firewall solution.  Then again,
I don't know the technicalities or even if it's possible to use a
userland package to provide true load balancing abilities based on
either what you said, or mem usage, or whatever.

Adam Wenzel


In a message dated 6/20/2003 12:01:44 PM Central Daylight Time, [EMAIL PROTECTED] writes:

Hi list,
I'm sure anyone here knows about the linux virtual server (layer 4 load-balancer).
I searched the web for an equivalent for *bsd, but found none.
The only thing which looks like something like a load-balancer is the FreeBSD loadd,
which requires packets to copied from kernel-space to user-space and vice versa.
I know that OpenBSD/pf has some abilities for load-balancing ip packets.
I'd like to know if it goes beyond the round-robin stuff (e.g. schedulars for least-connection,weighted round-robin),
or if just does that.
I've played arround with load-balancers (F5 BigIP,local director) and would like to write one for *BSD's, if
there is a demand for that (and to get my hand dirty on code again).
Would it be a good idea to integrate it into a packet-filter (like the lvs) or implement it as a
stand-alone solution ?
 
Any comment is welcome.
Hope this is not to off-topic.
 
Regards,
Stefan Sonnenberg-Carstens


Reply via email to