From: Hannes Eder <heder@google.com>
Date: Fri, 23 Jul 2010 10:46:32 +0000 (+0200)
Subject: IPVS: make friends with nf_conntrack
X-Git-Tag: v2.6.36-rc1~571^2~46^2~16
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7b215ffc3885a38182d3d49ceb41d0a81c3e041a;p=pandora-kernel.git

IPVS: make friends with nf_conntrack

Update the nf_conntrack tuple in reply direction, as we will see
traffic from the real server (RIP) to the client (CIP).  Once this is
done we can use netfilters SNAT in POSTROUTING, especially with
xt_ipvs, to do source NAT, e.g.:

% iptables -t nat -A POSTROUTING -m ipvs --vaddr 192.168.100.30/32 --vport 80 \
		  -j SNAT --to-source 192.168.10.10

[ minor fixes by Simon Horman <horms@verge.net.au> ]
Signed-off-by: Hannes Eder <heder@google.com>
Signed-off-by: Simon Horman <horms@verge.net.au>
Signed-off-by: Patrick McHardy <kaber@trash.net>
---

Reading git-diff-tree failed