Re: [Keepalived-devel] Connection state propagation

[John P. L. <va...@tu...>]

On Wed, 2003-07-23 at 04:41, Diego Rivera wrote:
> I've heard of the "antefacto" patch which allows IPVS connection state
> to be replicated to IPTables such that when failover occurrs there's no
> interruption of established links.
>=20
> However, by the maintainer's admission it is out of date and it's
> unclear whether it will be maintained further (or even integrated into
> the 2.4.2x tree).
>=20
> I'm wondering if this patch is the only way to make that happen
> (iptables conn state replication between boxes).

 The patch won't be maintained...it was for a company making a box that
ran iptables & ipvs concurrently, who have since gone out of business.=20

 The patch wasn't concerned with state replication between boxes - it
was just so that the outgoing streams of incoming load balanced
connections would be considered "established" by iptables.

 Have a look at;
http://lists.netfilter.org/mailman/listinfo/netfilter-failover for
netfilter state replication software.

John