Retaining source address
Brought to you by:
inlabnetworks,
obermair
I'm using balance on an OpenBSD 3.2 system running
pf. It is balancing http(s) for three servers. Here's the
config.
ext_if = A.A.A.100
int_if = B.B.B.1
www1=B.B.B.201
www2=B.B.B.202
www3=B.B.B.203
the balance command is:
balance -b A.A.A.100 http(s) B.B.B.201 B.B.B.202
B.B.B.203
It works very well. However, every request has a source
address of B.B.B.1 rather than the original source
address. Is there any way to retain the source address?
Logged In: YES
user_id=121592
Unfortunately not, balance does not re-write any HTTP
queries.
For functionality like this consider pound (http://www.apsis.
ch/pound/) in conjunction with apache's
mod_extract_forwarded (http://web.warhound.
org/mod_extract_forwarded/) to log the X-Forwarded-For
header.