On: AWS Network Load Balancer

[cperciva]

There must be some magic happening somewhere, because otherwise outgoing packets would have the wrong source address.

[ec109685 → cperciva]

You can use direct server return to manipulate the Ethernet frames so that packets don't travel back through the load balancer on the way to the parent switch.

[toast0 → ec109685]

That generally requires config on the serving hosts, which wasn't mentioned in the setup. I think I saw a reference to adding hosts with a different port number than the service port as well. For people in EC2-VPC (not classic), all their traffic is going through an Amazon NAT anyway, perhaps this new service is setting up translations there. (Note all the references to VPC, and never a mention of EC2-classic)

[bogomipz → ec109685]

Direct Server Return works at layer 3 not layer 2, its routing and encapsulation - IP in IP, GRE etc.

[toast0 → bogomipz]

You can do it at layer 2 as well, but it requires that the load balancer have an interface on the same broadcast domains as the hosts.

[bogomipz → toast0]

I am confused at how this would work. Can you elaborate? Also broadcast domain is a layer 3 construct.