[Gllug] IPv6 and firewalls

Chris Bell chrisbell at 3966.ukfsn.org
Tue Aug 11 22:18:22 UTC 2009


On Tue 11 Aug, Robert McKay wrote:
 >
> It's perfectly possible to have a pair of boxes doing fail safe routing even
> if they are 'hidden' (which fundamentally just means they aren't
> decrementing the ttl of the packets they route and aren't directly
> accessible from the internet on a public IP). You'd basically have one of
> the machines sending some sort of a heartbeat that suppressed the failover
> node from routing packets. If the heartbeat goes away then it starts
> routing. I can think of a few ways of rigging this up (heartbeat,
> netfilter-failover, keepalived etc).

but not load sharing. I have been using IPCop, which offers a range of
facilities, although I have not used them all, but it will not be IPv6
capable for a while. Bridge control looks like a reasonable alternative.


   Thanks for the replies.

-- 
Chris Bell NEW address: chrisbell at chrisbell.org.uk
Microsoft sells you Windows ... Linux gives you the whole house.
www.chrisbell.org.uk (was www.overview.demon.co.uk)

-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug




More information about the GLLUG mailing list