Difference between revisions of "L4IP"

From Lundman Wiki
Jump to: navigation, search
 
m
Line 1: Line 1:
 
 
== L4IP ==
 
== L4IP ==
  
Line 19: Line 18:
  
 
Earlier (latest stable) tarball is available here:
 
Earlier (latest stable) tarball is available here:
[http://www.lundman.net/ftp/l4ip/l4ip-v1.0.b294.tgz l4ip-v1.0.b294.tgz]
+
[http://www.lundman.net/ftp/l4ip/l4ip-v1.0.b294.tgz l4ip-v1.0.b294.tgz]
[http://www.lundman.net/ftp/l4ip/l4ip-v1.0.b269.tgz l4ip-v1.0.b269.tgz]
+
[http://www.lundman.net/ftp/l4ip/l4ip-v1.0.b269.tgz l4ip-v1.0.b269.tgz]
[http://www.lundman.net/ftp/l4ip/l4ip-v1.0.b248.tgz l4ip-v1.0.b248.tgz]
+
[http://www.lundman.net/ftp/l4ip/l4ip-v1.0.b248.tgz l4ip-v1.0.b248.tgz]
  
 
CVS [http://www.lundman.net/unix/l4ip_commitlog.txt Commitlog]
 
CVS [http://www.lundman.net/unix/l4ip_commitlog.txt Commitlog]

Revision as of 12:10, 17 February 2006

L4IP

Layer-4 Health Check Daemon for IP Filter.

* Define as many clusters, with as many members as you need.
* Automatically adds and removes "ipnat" rules as needed.
* Flexible health check support, tcp-open, tcp-close, udp-open, udp-close, system.
* Simple scripting available for health checks in send/expect syntax with fnmatch pattern comparison
* Binary protocol supported in url-encoding style syntax (eg %0D)
* system() like execution of external commands available. (spawn your own health-check testers)
* Reload and restart leaving last-known-state available for less service impact.
* SSL supported for TCP testers.
* Optional IPF rules to sense RST return-packets for faster failure detection.

L4IP can use either direct ioctl, or system() style calls to the executable "ipnat". This first method is more efficient, but is very unportable. The second method should work on nearly all platforms and version of IP Filter that supports round-robin.

Available in CVS under "l4ip"

Earlier (latest stable) tarball is available here:

l4ip-v1.0.b294.tgz
l4ip-v1.0.b269.tgz
l4ip-v1.0.b248.tgz

CVS Commitlog

Example configuration

Screen shot