On Wed, Apr 27, 2022 at 02:59:42PM -0400, Bryan Seitz wrote: > Chrony devs, > > We’d like to migrate to a load balancer using direct server return with > Chrony. The VIP address is assigned to the LO interface and we are using an > IPIP tunnel. The problem is that Chrony receives the packet on the tunl0 > (pip) interface and sends the reply (DSR with real client IP destination) > back out the tunl0 interface. The packet needs to go out eth0 since that is > how things are routed properly. ISC Kea has an option to do this however I > cannot find an equivalent with Chrony. Is there a solution or is it possible > to add similar functionality to Chrony?
What version of chrony are you using? In 4.0 there was this change: * Don't set interface for NTP responses to allow asymmetric routing which was intended for cases like you describe. -- Miroslav Lichvar -- To unsubscribe email chrony-dev-requ...@chrony.tuxfamily.org with "unsubscribe" in the subject. For help email chrony-dev-requ...@chrony.tuxfamily.org with "help" in the subject. Trouble? Email listmas...@chrony.tuxfamily.org.