0

Let' say we have two instances of webserver listening on port 80 and 81 and I want to seamlessly redirect customer traffic without losing any packets from instance1 to instance2.
My understanding that simple NEW match would work.Is it correct?

$ iptables -A PREROUTING -t nat -p tcp --dport 80 -m state --state NEW -j REDIRECT --to-port 81

I expect old connection to be open until they are closed and any new connections would be redirected to the new port.

1 Answer 1

1

Don't forget to also allow input on the port you're redirecting to.

--iptables -A INPUT -p tcp --dport 81 -j ACCEPT
1
  • Thank you Peter, my assumption was that no other rules are in place
    – Sergei
    Sep 22, 2011 at 8:38

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .