LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: [lvs-users] LVS/TUN Help with FWMARK

To: "LinuxVirtualServer.org users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: [lvs-users] LVS/TUN Help with FWMARK
Cc: Jenny Lee <bodycare_5@xxxxxxxx>
From: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
Date: Thu, 28 Jun 2012 11:46:22 +0200
On Thu, 2012-06-28 at 09:56 +0300, Julian Anastasov wrote:
> On Thu, 28 Jun 2012, Jenny Lee wrote:
> 
> > On MACHINE 2, I run:
> >  
> > service iptables stop
> > modprobe ipip
> > ip addr add 1.1.1.3/32 dev tunl0
> 
>       Can this help?
> 
> cat /proc/sys/net/ipv4/conf/tunl0/rp_filter
> echo 0 > /proc/sys/net/ipv4/conf/tunl0/rp_filter

Hi Jenny

The problem is most likely Reverse Path Filtering, like Julian is
pointing out.

Please provide output of command:
 grep . /proc/sys/net/ipv4/conf/*/rp_filter

You also have to make sure the the "all" rp_filter = 0, by running:

 echo 0 > /proc/sys/net/ipv4/conf/all/rp_filter


For IPVS TUN mode I recommend that you edit your /etc/sysctl.conf and
add:
 net.ipv4.conf.default.rp_filter = 0
 net.ipv4.conf.all.rp_filter = 0


You mentioned your were using different datacenters. Do notice that the
datacenter might also have implemented Reverse Path Filtering on their
border routers, which will cause your responses to be dropped... but
this should at least get you a step further.

-- 
Best regards,
  Jesper Dangaard Brouer
  MSc.CS, Sr. Network Kernel Developer at Red Hat
  Author of http://www.iptv-analyzer.org
  LinkedIn: http://www.linkedin.com/in/brouer



_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

<Prev in Thread] Current Thread [Next in Thread>