add an alternative "route to" mode to relayd redirections which maps

to pf route-to instead of the default rdr. it is a first steps towards
support for "direct server return" (dsr), an asynchronous mode where
the load balanced servers send the replies to a different gateway like
a l3 switch/router to handle higher amounts of return traffic.
because the state handling in pf isn't optimal for this case yet, it
just sees half of the TCP connection, the sessions are forced to time
out after fixed number of seconds.

discussed with many, thought about in the onsen

1 files changed, 4 insertions, 3 deletions

diff --git a/usr.sbin/relayd/relayd.8 b/usr.sbin/relayd/relayd.8
index 2ef4940fbac..90082b6428b 100644
--- a/usr.sbin/relayd/relayd.8
+++ b/usr.sbin/relayd/relayd.8
@@ -1,4 +1,4 @@
-.\"	$OpenBSD: relayd.8,v 1.16 2007/12/12 14:55:12 jmc Exp $
+.\"	$OpenBSD: relayd.8,v 1.17 2008/05/07 01:49:29 reyk Exp $
 .\"
 .\" Copyright (c) 2006 Pierre-Yves Ritschard <pyr@openbsd.org>
 .\"
@@ -14,7 +14,7 @@
 .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 .\"
-.Dd $Mdocdate: December 12 2007 $
+.Dd $Mdocdate: May 7 2008 $
 .Dt RELAYD 8
 .Os
 .Sh NAME
@@ -49,10 +49,11 @@ To allow
 .Nm
 to properly set up
 .Xr pf 4
-rules, the following line is required in the NAT section of
+rules, the following lines are required in the NAT and filter sections of
 .Xr pf.conf 5 :
 .Bd -literal -offset indent
 rdr-anchor "relayd/*"
+anchor "relayd/*"
 .Ed
 .Pp
 Layer 7 relaying happens at the application level and is