OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Proxy Load Balancing

From: Michael Nguyen (michaelntwentyten.org)
Date: Tue Jan 08 2008 - 14:13:17 CST


So, we've moved to a managed hosting provider and no longer have our own
load balancers. As a result, we've gotten stuck with their load
balancing solution which does only proxy and not NAT. Because of this,
our Postfix servers only see the load balancer's internal IP address and
not the actual client IP address. This breaks things like SPF and RBL
checks. So, here's what I came up with...

I've thought about putting Postfix on the load balancer and having
outside traffic connect to that first, then have Postfix relay through
the load balancer via transport. My question is this...does this have a
chance in hell of working? I use 7 Postfix servers to keep up with all
the MX traffic right now, but those 7 servers do all sorts of lookups
for users etc. This server would basically do a dumb transport from
itself to the load balancer for the sole purpose of getting a "Received"
header written. Do you see any possibility that one Postfix server
could handle this?

Michael