Dividing traffic with u32 iptables filter

Applications IP Networking
1

I would like to divide traffic between two squid servers.

I have been thinking about using iptables u32 filter, to check last bit of ip address which is comming to gateway. Then I would like to direct even IP adresses to one squid host, and odd to the other. Is it reasonable ?

Thank you for any input,
and please forgive me for my English.

---------- Post updated at 10:17 PM ---------- Previous update was at 08:34 PM ----------

I believe that solution will be

iptables -m u32 --u32 "12&0x01=1"
iptables -m u32 --u32 "12&0x01=0"

Based on:
Netfilter Extensions HOWTO: New netfilter matches

2

That will work to divide traffic, but you have no guarantee about load leveling which is the whole idea behind this. So, you have a statistically valid sample of previous hits?

You may find that 30% of your traffic is from one site, I do not know, I made that number up. But it would really skew you server load. For example, large companies behind firewalls may present as one single IP, and if your service is really useful to abc.com then maybe lots of users from there will connect.

3

Your point of view seems to be correct. This matter is open for discussion. We hope that traffic will normalize to achieve equal distribution.

But this solution have to be tested on real traffic.

Any alternatives to this idea will be appreciated.

Thank you for your time.