summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorcurrite <sll@disroot.org>2020-11-04 18:09:17 +0100
committercurrite <sll@disroot.org>2020-11-04 18:12:10 +0100
commitaae95720b0cdabb78d0c8c1f592765c65dd8aeba (patch)
tree4f714bdaf2ca20eb625e22ff57f51332fab3d07f
parentd09ccc9cf73b3fde99d22c50584abdfda853b792 (diff)
downloadvyos-documentation-aae95720b0cdabb78d0c8c1f592765c65dd8aeba.tar.gz
vyos-documentation-aae95720b0cdabb78d0c8c1f592765c65dd8aeba.zip
wan-load-balancing: add wiki image for sticky connections
-rw-r--r--docs/_static/images/sticky-connections.jpgbin0 -> 22252 bytes
-rw-r--r--docs/load-balancing.rst6
2 files changed, 6 insertions, 0 deletions
diff --git a/docs/_static/images/sticky-connections.jpg b/docs/_static/images/sticky-connections.jpg
new file mode 100644
index 00000000..25fd72a9
--- /dev/null
+++ b/docs/_static/images/sticky-connections.jpg
Binary files differ
diff --git a/docs/load-balancing.rst b/docs/load-balancing.rst
index 0149ac76..cae2f6a5 100644
--- a/docs/load-balancing.rst
+++ b/docs/load-balancing.rst
@@ -159,6 +159,12 @@ This works through automatically generated source NAT (SNAT) rules, these rules
Sticky Connections
------------------
+Inbound connections to a WAN interface can be improperly handled when the reply is sent back to the client.
+
+.. image:: /_static/images/sticky-connections.jpg
+ :width: 80%
+ :align: center
+
Upon reception of an incoming packet, when a response is sent, it might be desired to ensure that it leaves from the same interface as the inbound one.
This can be achieved by enabling sticky connections in the load balancing: