LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: Intel 7110 SSL Accelerators and LVS Problem

To: jjohnson@xxxxxxxx, lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Subject: Re: Intel 7110 SSL Accelerators and LVS Problem
From: Terje Eggestad <terje.eggestad@xxxxxxxx>
Date: Fri, 13 Oct 2000 10:30:36 +0200
Since you said your in an evaluation process, I offer another solution to
the accelerator
problem, that will give you a cleaner lvs setup.

I've experience  with a PCI accelerator card from RainBow,
http://isg.rainbow.com/cryptoswift/cs_pci.html . My experience was with
Netscape Enterprise
Server on HP, but RedHat flags that their version of Apache, Stronghold,
has drivers for this card.

The effect was nothing short of amasing.  Before adding this card the
CPU usage ration
between  the web server and the CGI programms was 75:25. After adding this
card it was in the
neighbourhood of 10:90.

Jeremy Johnson wrote:

> I have been evaluating the Intel 7110 and the 7180 SSL E-commerce
> accelerators recently. I would prefer to use the 7110's (Straight SSL
> Accelerators) coupled with LVS instead of throwing out LVS and using the
> 7180 as the cluster director.
> .
> .
> .
>
> These 7110 SSL Accelerators have 2 Ports, IN one and OUT one. The
> problem is that when the request comes into the Director and the
> director looks up the MAC address of the RealServer, it is getting the
> MAC address of the First NIC in the 7110 Director, so when the packet
> headers are rewritten with the Destination MAC Address, the MAC address
> of a NICK in the 7110 is written instead of the MAC of the RealServer.
> The effect is a black hole.The cluster works fine without the 7110 in
> between LVS and the RealServer, as soon as I swap in the 7110, all
> traffic bound for the RealServer with the 7110 in front of it is
> blackholed.
>
> I am really hoping that someone has encountered something like this and
> has a fix. The obvious fix would be to be able to on the director force
> the MAC addresses of the RealServer instead of looking them up.
>
> Any ideas?
>

--
_________________________________________________________________________

Terje Eggestad                  terje.eggestad@xxxxxxxx
Scali Scalable Linux Systems    http://www.scali.com

Olaf Helsets Vei 6              tel:    +47 22 62 89 61 (OFFICE)
P.O.Box 70 Bogerud                      +47 975 31 574  (MOBILE)
N-0621 Oslo                     fax:    +47 22 62 89 51
NORWAY
_________________________________________________________________________





<Prev in Thread] Current Thread [Next in Thread>