Re: [Linux-ha-dev] monitoring services via ipip tunnel?

To: lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Subject: Re: [Linux-ha-dev] monitoring services via ipip tunnel?
Cc: jason sydes <jason@xxxxxxxxxxxx>
From: Horms <horms@xxxxxxxxxxxx>
Date: Thu, 26 Sep 2002 09:43:35 +0900
On Wed, Sep 25, 2002 at 04:37:55PM -0700, sage weil wrote:
> Hi all,
> I'm setting up an LVS cluster using ldirectord and am running into
> problems monitoring the realservers.  The services on our machines are
> configured to bind to a single IP address (the VIP), and for ease of
> management and scalability we'd like to be able to keep things that way.
> Unfortunately that means that ldirectord thinks the service is down when
> it tries to connect to port whatever on the RIP.
> My question is this:  is it possible to monitor the service on the
> realserver using the VIP via the ipip tunnel?
> I think this should be possible by creating a source route from the DIP to
> the VIP via an IPIP tunnel the RIP (using the new ip routing tools).
> ldirectord's monitoring functions could to modified to
>  - add the route to a particular RIP, something like
>      ip rule add from DIP to VIP table realserver1
>      ip route add VIP via RIP dev tunl0:123 table realserver1     (???)
>  - do normal check
>  - remove route
> and repeat for each realserver it's monitoring.  Since there's normally no
> IP traffic originating from the director to the VIP this shouldn't affect
> anything else on the system...
> Has anybody tried anything like this?  Would this work?

I am not entirely sure that I understand your setup. Your suggested
hack to ldirectord sounds like it would work, but also sounds like
it may lead to some headaches down the road - obscure hacks can
be difficult to maintain.


<Prev in Thread] Current Thread [Next in Thread>