Using PF 2.0 as load-balancer/high-availability only



  • Hi All,

    I have been requested to find solution for current situation , there is a need for load-balancer/high-availability for web site only in LAN environment, without the need for firewall and nat.

    my first thought where using LVS(linux virtual server) but i remembered that PF especially ver 2.0 offering a nice load-balancer/high-availability feater but i need to know if its can answer following scenario which is  load-balancer/high-availability for web site only in LAN environment, without the need for firewall and nat , if yes i would prefer using PF.

    If its possible how can it be done in LAN env ?.
    Thanks



  • In general, yes that's doable. How depends on specifics, in typical Internet load balancer scenarios the original source IP is retained and passed onto the internal server, but that may break routing in a LAN environment depending on the location of clients and servers, requiring a different type of config or outbound NAT to translate the source IP (as with the original source IP, the server will probably reply direct back to the client, which will break the TCP connection).


Locked