routing for jails on public IPs, jails on private IPs between 2 servers

[Izhar Firdaus]

Hi ,

I have this question which need some comment/help on:

== the setup ==
I have 2 freebsd servers with several jails running on it. Each server
have several jails thats either listening on publicly accessible IP or
listening on a loopback/private IP. The two servers are connected
together using vpn with routing that allows ServerA to connect to
private jails in ServerB and vice versa.

ServerA (10.1.0.1_tun0,192.168.1.1_bge0,192.168.1.2_bge0,127.0.1.1_lo1,127.0.1.1_lo1)
- JailA(192.168.1.2_bge0)
- JailB(127.0.1.1_lo1)
- JailC(127.0.1.1_lo1)

ServerB (10.1.0.3_tun0,192.168.1.3_bge0,192.168.1.4_bge0,127.0.2.1_lo1,127.0.2.2_lo1)
- JailA(192.168.1.4_bge0)
- JailB(127.0.2.1_lo1)
- JailC(127.0.2.2_lo1)


== the issue ==

under the current config,
ServerA can connect to all private jails in ServerB through
vpn+routing and vice versa.
Private jails in ServerA can connect to public jails in ServerB
through NAT and vice versa.

However, I cant figure out how to allow public jails in ServerA to
connect to private jails in ServerB.

Anybody have idea on how to implement it?

Thanks


-- 
Mohd Izhar Firdaus Bin Ismail
Amano Hikaru  天野晃 「あまの ひかる」
http://fedoraproject.org/wiki/MohdIzharFirdaus
http://blog.kagesenshi.org
92C2 B295 B40B B3DC 6866  5011 5BD2 584A 8A5D 7331