Re: Half--NAT

2011-03-24 Thread David Birdsong
and will simply rewrite IP and sometimes TCP/UDP headers On Thu, Mar 24, 2011 at 4:59 PM, Jason J. W. Williams jasonjwwilli...@gmail.com wrote: Hi All, I'm trying to find documentation on configuring HAProxy to do half-NAT, but can't seem to find any. Does HAProxy not support half-NAT or does it call

Re: Half--NAT

2011-03-24 Thread Jason J. W. Williams
Hi David, I'd argue HAProxy is more of a L4-7 load balancer than just a proxy, and that's what we're trying to use it as on L4. The functionality I need to replace is Half-NAT in a hardware load balancer: Select a backend server according to the SLB algorithm and rewrite the destination address

Re: Half--NAT

2011-03-24 Thread Ben Timby
On Thu, Mar 24, 2011 at 4:59 PM, Jason J. W. Williams jasonjwwilli...@gmail.com wrote: Hi All, I'm trying to find documentation on configuring HAProxy to do half-NAT, but can't seem to find any. Does HAProxy not support half-NAT or does it call it something else? Thank you in advance for your

Re: Half--NAT

2011-03-24 Thread David Birdsong
On Thu, Mar 24, 2011 at 5:27 PM, Ben Timby bti...@gmail.com wrote: On Thu, Mar 24, 2011 at 4:59 PM, Jason J. W. Williams jasonjwwilli...@gmail.com wrote: Hi All, I'm trying to find documentation on configuring HAProxy to do half-NAT, but can't seem to find any. Does HAProxy not support half

Re: Half--NAT

2011-03-24 Thread Willy Tarreau
half-NAT, but can't seem to find any. Does HAProxy not support half-NAT or does it call it something else? Thank you in advance for your help. If you mean something like half-NAT described below... http://lbwiki.com/index.php/NAT Then you are looking for the TPROXY support

Re: Half--NAT

2011-03-24 Thread Jason J. W. Williams
If you mean something like half-NAT described below... http://lbwiki.com/index.php/NAT That's exactly what I mean by half-NAT. Then you are looking for the TPROXY support of HAProxy... http://blog.loadbalancer.org/configure-haproxy-with-tproxy-kernel-for-full-transparent-proxy

Re: Half--NAT

2011-03-24 Thread Jason J. W. Williams
HW SLB background where it's called half-NAT. -J

Re: Half--NAT

2011-03-24 Thread Robert Joseph
to call it...y'all have it is all that matters for me. :) I just come from a traditional HW SLB background where it's called half-NAT. -J somebody wanna make it do DSR next? :) -r -- Robert Joseph ImageShack Corp Free Image Hosting www.imageshack.us

Re: Half--NAT

2011-03-24 Thread Jason J. W. Williams
somebody wanna make it do DSR next? :) -r Just from a cursory look, that seems like something TPROXY would need to be extended to support and then HAProxy could leverage it. Should only take a weekend right? ;) -J

Re: Half--NAT

2011-03-24 Thread Willy Tarreau
it...y'all have it is all that matters for me. :) I just come from a traditional HW SLB background where it's called half-NAT. Excuse-me for insisting, but this is still different and the difference matters. When a component does NAT (half, full, etc...) it is in the middle of the connection, it just

Re: Half--NAT

2011-03-24 Thread Willy Tarreau
On Thu, Mar 24, 2011 at 05:41:56PM -0600, Jason J. W. Williams wrote: somebody wanna make it do DSR next? :) -r Just from a cursory look, that seems like something TPROXY would need to be extended to support and then HAProxy could leverage it. Should only take a weekend right? ;)