IPVS FULLNAT and SYNPROXY - Revision history

Wensong: tidy up introduction

2012-08-09T10:42:58Z

tidy up introduction

Benjiaming: /* Introduction */

2012-08-08T09:37:05Z

‎Introduction

Wensong: wording

2012-08-08T09:19:47Z

wording

Wensong at 08:42, 8 August 2012

2012-08-08T08:42:16Z

Wensong: /* Introduction */ wording

2012-08-08T08:24:35Z

‎Introduction: wording

Wensong: wording

2012-08-08T08:13:45Z

wording

Benjiaming: /* Introduction */

2012-08-08T07:41:26Z

‎Introduction

Benjiaming: /* Introduction */

2012-08-08T07:14:29Z

‎Introduction

Benjiaming: /* Building */

2012-08-01T02:06:36Z

‎Building

Benjiaming: /* Building */

2012-08-01T02:05:59Z

‎Building

@@ Line 3: / Line 3: @@
 '''FullNAT: A new packet forwarding method for IPVS, other than DR/NAT/TUNNEL'''
-The main principle: the module introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS is capable of inter-vlan communication, while RS only need to access internal network.
+The main principle is as follows: the module introduces local ip address (IDC internal ip address, lip), IPVS translates cip-vip to/from lip-rip, in which lip and rip both are IDC internal ip address, so that LVS load balancer and real servers can be in different vlans, and real servers only need to access internal network. See [[LVS/FNAT | Virtual Server via Full NAT]] for more information.
 '''SYNPROXY: Defence module against synflooding attack'''
@@ Line 10: / Line 10: @@
-This FullNAT and SYNPROXY code for IPVS in Linux kernel 2.6.32 was written by Jiaming Wu at taobao.com, Jian Chen at 360.cn, and Shunmin Zhu at taobao.com, with some advising from Wensong Zhang at taobao.com. The code was affected by ideas of the source NAT and SYNPROXY version that was hard coded to IPVS in Linux kernel 2.6.9 by Wen Li, Yan Tian, Jian Chen, Yang Yi,Yaoguang Sun, Fang Han, Ying liu and Jiaming Wu at baidu.com in 2009.
+This FullNAT and SYNPROXY code for IPVS in Linux kernel 2.6.32 was written by Jiaming Wu at taobao.com, Jian Chen at 360.cn, and Shunmin Zhu at taobao.com, with some advising from Wensong Zhang at taobao.com. The code was affected by ideas of the source NAT and SYNPROXY version that was hard coded to IPVS in Linux kernel 2.6.9 by Wen Li, Yan Tian, Jian Chen, Yang Yi, Yaoguang Sun, Fang Han, Ying liu and Jiaming Wu at baidu.com in 2009.
-The FullNAT and SYNPROXY support were added to keepalived/ipvsadm by Jiajun Chen, and Ziang Chen at taobao.com.
+The FullNAT and SYNPROXY support were added to keepalived/ipvsadm by Jiajun Chen and Ziang Chen at taobao.com.
 Please note that FullNAT and SYNPROXY only had limited testing.
 == Document ==

@@ Line 1: / Line 1: @@
 == Introduction==
-'''FULLNAT: A new packet forwarding method for IPVS, other than DR/NAT/TUNNEL'''
+'''FullNAT: A new packet forwarding method for IPVS, other than DR/NAT/TUNNEL'''
 The main principle: the module introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS is capable of inter-vlan communication, while RS only need to access internal network.
@@ Line 10: / Line 10: @@
-This FullNAT and SYNPROXY code for IPVS in Linux kernel 2.6.32 was written by Jiaming Wu at taobao.com, and Jian Chen at 360.cn, with some advising from Wensong Zhang at taobao.com. The code was affected by ideas of the source NAT and SYNPROXY version that was hard coded to IPVS in Linux kernel 2.6.9 by Wen Li, Yan Tian, Jian Chen, Yang Yi,Yaoguang Sun, Fang Han, Ying liu and Jiaming Wu at baidu.com in 2009.
+This FullNAT and SYNPROXY code for IPVS in Linux kernel 2.6.32 was written by Jiaming Wu at taobao.com, Jian Chen at 360.cn, and Shunmin Zhu at taobao.com, with some advising from Wensong Zhang at taobao.com. The code was affected by ideas of the source NAT and SYNPROXY version that was hard coded to IPVS in Linux kernel 2.6.9 by Wen Li, Yan Tian, Jian Chen, Yang Yi,Yaoguang Sun, Fang Han, Ying liu and Jiaming Wu at baidu.com in 2009.
-The FULLNAT and SYNPROXY support were added to keepalived/ipvsadm by Jiajun Chen,Ziang Chen and Shunmin Zhu at taobao.com.
+The FullNAT and SYNPROXY support were added to keepalived/ipvsadm by Jiajun Chen, and Ziang Chen at taobao.com.
-Please note that FULLNAT and SYNPROXY only had limited testing.
+Please note that FullNAT and SYNPROXY only had limited testing.
 == Document ==

@@ Line 1: / Line 1: @@
 == Introduction==
-'''FULLNAT: A new packet forwarding model for IPVS besides DR/NAT/TUNNEL'''
+'''FULLNAT: A new packet forwarding method for IPVS, other than DR/NAT/TUNNEL'''
 The main principle: the module introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS is capable of inter-vlan communication, while RS only need to access internal network.
@@ Line 10: / Line 10: @@
-This FullNAT and SYNPROXY code for IPVS in Linux kernel 2.6.32 was written by Jian Chen at 360.cn, Jiaming Wu at taobao.com, with some advising from Wensong Zhang at taobao.com. The code was affected by ideas of the source NAT and SYNPROXY version that was hard coded to IPVS in Linux kernel 2.6.9 by Wen Li, Yan Tian, Jian Chen, Yang Yi,Yaoguang Sun, Fang Han, Ying liu and Jiaming Wu at baidu.com in 2009.
+This FullNAT and SYNPROXY code for IPVS in Linux kernel 2.6.32 was written by Jiaming Wu at taobao.com, and Jian Chen at 360.cn, with some advising from Wensong Zhang at taobao.com. The code was affected by ideas of the source NAT and SYNPROXY version that was hard coded to IPVS in Linux kernel 2.6.9 by Wen Li, Yan Tian, Jian Chen, Yang Yi,Yaoguang Sun, Fang Han, Ying liu and Jiaming Wu at baidu.com in 2009.

@@ Line 5: / Line 5: @@
 The main principle: the module introduce local ip address (IDC internal ip address, lip), IPVS translate cip-vip to lip-rip, lip and rip both are IDC internal ip address, so LVS-RS is capable of inter-vlan communication, while RS only need to access internal network.
-'''SYNPROXY: Defence module against synflood attack'''
+'''SYNPROXY: Defence module against synflooding attack'''
 The main principle: based on tcp syncookies, please refer to http://en.wikipedia.org/wiki/SYN_cookies;

← Older revision		Revision as of 08:24, 8 August 2012
Line 10:		Line 10:


−	This FullNAT and SYNPROXY code for IPVS in Linux kernel 2.6.32 was written by Jian Chen at 360.cn, Jiaming Wu at taobao.com, with some advising from Wensong Zhang at taobao.com. The code was affected by ideas of the source NAT and SYNPROXY version that was ~~added~~ to IPVS in Linux kernel 2.6.9 by Wen Li, Yan Tian, Jian Chen, Yang Yi,Yaoguang Sun, Fang Han, Ying liu and Jiaming Wu.	+	This FullNAT and SYNPROXY code for IPVS in Linux kernel 2.6.32 was written by Jian Chen at 360.cn, Jiaming Wu at taobao.com, with some advising from Wensong Zhang at taobao.com. The code was affected by ideas of the source NAT and SYNPROXY version that was hard coded to IPVS in Linux kernel 2.6.9 by Wen Li, Yan Tian, Jian Chen, Yang Yi,Yaoguang Sun, Fang Han, Ying liu and Jiaming Wu at baidu.com in 2009.

@@ Line 10: / Line 10: @@
-The first version of FULLNAT and SYNPROXY were added to IPVS in Linux kernel 2.6.9 by WenLi,YanTian,JianChen,YangYi,YaoguangSun, FangHan,Yingliu and JiamingWu. Now, the second version were added in Linux kernel 2.6.32 by JianChen,JiamingWu and WensongZhang at TAOBAO;
+This FullNAT and SYNPROXY code for IPVS in Linux kernel 2.6.32 was written by Jian Chen at 360.cn, Jiaming Wu at taobao.com, with some advising from Wensong Zhang at taobao.com. The code was affected by ideas of the source NAT and SYNPROXY version that was added to IPVS in Linux kernel 2.6.9 by Wen Li, Yan Tian, Jian Chen, Yang Yi,Yaoguang Sun, Fang Han, Ying liu and Jiaming Wu.
-The FULLNAT and SYNPROXY support were added to keepalived/ipvsadm by JiajunChen,ZiangChen and ShunminZhu.
 Please note that FULLNAT and SYNPROXY only had limited testing.

@@ Line 96: / Line 96: @@
    cp lvs-tools.tar.gz ./; // lvs-tools.tar.gz is in lvs-fullnat-synproxy.tar.gz
    tar xzf lvs-tools.tar.gz;
 .1 keepalived install

@@ Line 99: / Line 99: @@
 .1 keepalived install
-   cd keepalived;
+   cd /home/pukong/tools/keepalived;
    ./configure --with-kernel-dir="/lib/modules/`uname -r`/build";
    make;
@@ Line 105: / Line 105: @@
 .2 ipvsadm install
-   cd ipvsadm;
+   cd /home/pukong/tools/ipvsadm;
    make;
    make install;
 .3 quaage install
-   cd quagga;
+   cd /home/pukong/tools/quagga;
    ./configure --disable-ripd --disable-ripngd --disable-bgpd --disable-watchquagga --disable-doc  --enable-user=root --enable-vty-group=root --enable-group=root --enable-zebra --localstatedir=/var/run/quagga
 make