LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: [lvs-users] LVS and docker containers

To: "LinuxVirtualServer.org users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: [lvs-users] LVS and docker containers
From: Tim Hockin <thockin@xxxxxxxxxx>
Date: Fri, 14 Aug 2015 12:04:37 -0700
Running a GUI on these machines is not possible - the OS is stripped
down enough that there's no support for it.

To be clear - this current config works - when I hit the VIP it flips
between the endpoints.  It just doesn't work for traffic from a docker
container, which crossses a linux bridge and is seen as "routed"
traffic as opposed to local.

I want to avoid encapsulating, if i can - many of the systems we're
building on are already running an encap like VXLAN, and the cost is
already too high.

On Fri, Aug 14, 2015 at 11:01 AM, Alex Lopez <alxmlpz@xxxxxxxxx> wrote:
> ok,  cool , i think You should download piranha , is a package that comes
> with lvs, and ipvsadm and  a GUI from Red Hat, to help you to set it up for
> the first time.
> I can guide u thru it . we use it  in different envs, and work great for
> us.
> After the initial config, the ipvsadm commands, are pretty straight
> forward.
>
> >From your command output , it looks that the lvs is pointing to ports 9376.
> One thing, if the servers are in different subnet, you need to use tunnel
> mode . :)
>
> But start with piranha , I can help u from there, :)
>
>
>
> On Fri, Aug 14, 2015 at 10:18 AM, Tim Hockin <thockin@xxxxxxxxxx> wrote:
>
>> # ipvsadm -ln
>> IP Virtual Server version 1.2.1 (size=4096)
>> Prot LocalAddress:Port Scheduler Flags
>>   -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
>> TCP  9.9.9.9:99 rr
>>   -> 10.244.0.7:9376              Masq    1      0          0
>>   -> 10.244.1.4:9376              Masq    1      0          0
>>
>> On Fri, Aug 14, 2015 at 10:00 AM,  <alxmlpz@xxxxxxxxx> wrote:
>> > Ok  can u also post the output of this command : ipvsadm -ln  :)
>> >
>> > Sent from my iPhone
>> >
>> >> On Aug 14, 2015, at 9:05 AM, Tim Hockin <thockin@xxxxxxxxxx> wrote:
>> >>
>> >> I'm really totally new to ipvs.
>> >>
>> >> ipvsadm -A -t 10.10.10.10:1010 -s rr
>> >> ipvsadm -a -t 10.10.10.10:1010 -r 10.244.0.7:9376 -m
>> >> ipvsadm -a -t 10.10.10.10:1010 -r 10.244.1.4:9376 -m
>> >>
>> >> When I access 10.10.10.10:1010 I get those two backends.  WAY simpler
>> >> than the iptables equivalent.
>> >>
>> >> But if I do 'docker run -ti busybox wget -qO- 10.10.10.10:1010 it just
>> >> hangs', whereas iptables works.
>> >>
>> >> I'm also wrestling with port rewrites without MASQ, but I'll cross
>> >> that bridge if I can get it to work with MASQ
>> >>
>> >>
>> >>> On Fri, Aug 14, 2015 at 7:16 AM,  <alxmlpz@xxxxxxxxx> wrote:
>> >>> Can u send the config ?
>> >>>
>> >>> Sent from my iPhone
>> >>>
>> >>>> On Aug 13, 2015, at 10:30 PM, Tim Hockin <thockin@xxxxxxxxxx> wrote:
>> >>>>
>> >>>> Not sure how active LVS is these days, but it seems to maybe scratch
>> an itch.
>> >>>>
>> >>>> I want to set up a VIP with some number of real servers.  I want that
>> >>>> VIP to be available to docker containers which run in distinct network
>> >>>> namespaces.  It doesn't seem to work, but maybe I am missing
>> >>>> something?
>> >>>>
>> >>>> I have implemented this in pure iptables, but it is complex.  IPVS
>> >>>> seems cleaner...
>> >>>>
>> >>>> Tim
>> >>>>
>> >>>> _______________________________________________
>> >>>> Please read the documentation before posting - it's available at:
>> >>>> http://www.linuxvirtualserver.org/
>> >>>>
>> >>>> LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
>> >>>> Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
>> >>>> or go to http://lists.graemef.net/mailman/listinfo/lvs-users
>> >>>
>> >>> _______________________________________________
>> >>> Please read the documentation before posting - it's available at:
>> >>> http://www.linuxvirtualserver.org/
>> >>>
>> >>> LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
>> >>> Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
>> >>> or go to http://lists.graemef.net/mailman/listinfo/lvs-users
>> >>
>> >> _______________________________________________
>> >> Please read the documentation before posting - it's available at:
>> >> http://www.linuxvirtualserver.org/
>> >>
>> >> LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
>> >> Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
>> >> or go to http://lists.graemef.net/mailman/listinfo/lvs-users
>> >
>> > _______________________________________________
>> > Please read the documentation before posting - it's available at:
>> > http://www.linuxvirtualserver.org/
>> >
>> > LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
>> > Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
>> > or go to http://lists.graemef.net/mailman/listinfo/lvs-users
>>
>> _______________________________________________
>> Please read the documentation before posting - it's available at:
>> http://www.linuxvirtualserver.org/
>>
>> LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
>> Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
>> or go to http://lists.graemef.net/mailman/listinfo/lvs-users
>>
> _______________________________________________
> Please read the documentation before posting - it's available at:
> http://www.linuxvirtualserver.org/
>
> LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
> Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
> or go to http://lists.graemef.net/mailman/listinfo/lvs-users

_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

<Prev in Thread] Current Thread [Next in Thread>