LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: [lvs-users] LVS-DR generates TONS of icmp unreachables

To: Jerry Glomph Black <black@xxxxxxxx>
Subject: Re: [lvs-users] LVS-DR generates TONS of icmp unreachables
Cc: lvs-users@xxxxxxxxxxxxxxxxxxxxxx
From: Julian Anastasov <uli@xxxxxxxxxxxxxxxxxxxxxx>
Date: Thu, 20 Jan 2000 08:03:29 +0200 (EET)
        Hi,

On Wed, 19 Jan 2000, Jerry Glomph Black wrote:

> some of our users have complained about icmp bursts.
> 
> Look at a sample of tcpdump, as run on one of the RealServers.
> 
> What would cause this?  Sometimes the storms are far more intense.

        Are the packets to VirtualServerIP:80 rejected in the RealServerIP
using ipchains -j REJECT ? May be you default to REJECT and there is no
ACCEPT entry in the firewall for VirtualServerIP?

> 
> 21:06:08.200059 RealServerIP > 152.202.84.194: icmp: VirtualServerIP tcp port 
> 80 unreachable [tos 0xc0]
...
> 
> 
> (Using HORMS' redirect method on the RealServer)
> 
> /sbin/ipchains -I input -j REDIRECT 80 -d 0.0.0.0/0.0.0.0 80 -p tcp

        What about trying in the RealServerIP:

/sbin/ipchains -I input -j REDIRECT 80 -d VirtualServerIP 80 -p tcp

        Is your service running or only the icmps are generated ?

Regards,

Julian Anastasov


----------------------------------------------------------------------
LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
To unsubscribe, e-mail: lvs-users-unsubscribe@xxxxxxxxxxxxxxxxxxxxxx
For additional commands, e-mail: lvs-users-help@xxxxxxxxxxxxxxxxxxxxxx

<Prev in Thread] Current Thread [Next in Thread>