LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: using arptables to block ARP

To: "LinuxVirtualServer.org users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: using arptables to block ARP
From: Brett Simpson <simpsonb@xxxxxxxxxxxxxxxxxxxxxx>
Date: Fri, 18 Jun 2004 13:50:56 -0400
On Fri, 2004-06-18 at 13:39, Joseph Mack wrote:
> Brett Simpson wrote:
> 
> > > you can also use arp filtering, although no-one seems to be doing it
> 
> so you're doing it, these are your settings (IPADDR==VIP on the realserver?),
> it's working and you're happy with it?

It's works and I'm happy with it.

On my LVS Director I'm using...

TCP  192.168.0.57:8080 wrr persistent 3600
  -> 192.168.0.59:8080            Route   1      0          0
  -> 192.168.0.58:8080            Route   1      0          0

and on one of the real servers I'm using...

[root@extend1 network-scripts]# ip addr
1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 brd 127.255.255.255 scope host lo
    inet 192.168.0.57/32 brd 127.255.255.255 scope global lo:1
2: bond0: <BROADCAST,MULTICAST,MASTER,UP> mtu 1500 qdisc noqueue
    link/ether 00:08:02:f0:e4:30 brd ff:ff:ff:ff:ff:ff
    inet 192.168.0.58/24 brd 192.168.0.255 scope global bond0
3: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop qlen 1000
    link/ether 00:08:02:f0:e3:80 brd ff:ff:ff:ff:ff:ff
4: eth1: <BROADCAST,MULTICAST,SLAVE,UP> mtu 1500 qdisc pfifo_fast master
bond0 qlen 1000
    link/ether 00:08:02:f0:e4:30 brd ff:ff:ff:ff:ff:ff


<Prev in Thread] Current Thread [Next in Thread>