# The following virtual service covers all packets that are matched by an # ipchains input rule or rules that add a firewall-mark of 1 to the packet. # Firewall-marks are specified using the -m option to ipchains. Other # virtual services may be used by using different firewall-mark numbers. # # The virtual service will forward the packet to the corresponding port on # the real server scheduled for the connection. So traffic addressed to # port 80 will be forwarded to port 80 on one of the real servers similarly # for all other ports. This will work for both TCP/IP and UDP/IP, the only # limitation is on the match made by the ipchains rules. # # The service is set to "http" as this is used to check the availability of # the server. If it is available then the server is considered to be # available. Other service types as specified by "ldirectord -h" or the # ldirectord(8) man page may be used. # # Ldirectord will connect to each real server once per second and request # /index.html. If the data returned by the server does not contain the # string "Test Message" then the test fails and the real server will be # taken out of the available pool. The real server will be added back into # the pool once the test succeeds. If all real servers are removed from the # pool then localhost:0 is added to the pool as a fallback measure. # # Prepared: April 2005 # Global Directives checktimeout=10 checkinterval=2 #fallback=127.0.0.1:80 autoreload=no #logfile="/var/log/ldirectord.log" logfile="local0" quiescent=yes # Note: persistancy needs to be turned on if FTP traffic is to handled # using LVS-DR (gate) or LVS-TUN (ipip). This is not neccessary # or LVS-NAT (masq). virtual=1 real=192.168.6.7:0 masq real=192.168.6.7:0 masq service=http checkport=80 checktype=negotiate request="index.html" receive="Test Page" scheduler=rr #persistent=600