Author: "Timothy R. Weiand" <timothy.weiand@xxxxxxxxx>
Date: Thu, 07 Dec 2017 21:19:21 +0000
So, it turns out that I am currently interviewing to find a new employer. I will probably not pick this back up again; I will not be able to see if this works in the broken environment. Thanks for th
Author: Andrew Smalley <asmalley@xxxxxxxxxxxxxxxx>
Date: Tue, 7 Nov 2017 17:30:34 +0000
Hello Timothy Aaron has told me that you are in AWS and this being the case I hope ipip does indeed work with my hints. It is worth noting that I know in AWS we can not do Layer4 DR however with the
Author: "Timothy R. Weiand" <timothy.weiand@xxxxxxxxx>
Date: Tue, 07 Nov 2017 16:51:18 +0000
Ooohhhh!! Let me try this. Thanks for the directions, -Timothy On Mon, Nov 6, 2017 at 1:55 PM Andrew Smalley <asmalley@xxxxxxxxxxxxxxxx> wrote: _______________________________________________ Please
Author: Andrew Smalley <asmalley@xxxxxxxxxxxxxxxx>
Date: Mon, 6 Nov 2017 18:43:50 +0000
Hi Timothy, I've been testing ipip (Tun mode) and I have it working, I note that the Weak ES Model needs to be accounted for and the tunl0 should be a /32 not a /24 as you have it on the real server.
Author: "Timothy R. Weiand" <timothy.weiand@xxxxxxxxx>
Date: Tue, 22 Aug 2017 11:43:00 +0000
Aaron: I was able to get LVS-TUN working in between subnets in AWS if the real server is a 3.x kernel (RHEL to be specific). I had to set the destination side of the tunnel and the address on that in
Hi Timothy, What you had working was it in AWS or VMWare? I've pretty much given up trying to get the spoofed reply traffic back out of AWS it gets dropped always with either DR mode or TUN unless I
Author: "Timothy R. Weiand" <timothy.weiand@xxxxxxxxx>
Date: Thu, 10 Aug 2017 17:08:31 +0000
Julian: Good news and bad news: this guidance helped me get LVS-TUN working with a 3.10.0 kernel. But, I am not able to use the same configuration to get 4.4.x,4.8.x or 4.12.x working. We are working
Hello, tunl1/rp_filter=2 is ignored if there are no IPv4 addresses configured on tunl1, you can see __fib_validate_source() for reference: if (no_addr) goto last_resort; As result, packets are droppe
Hi Timothy, I've been watching this post to see if you get any replies, I too recently had issues trying LVS-TUN in Amazon AWS... I was using an IPsec VPN from home to my VPC attempting to load balan
Author: "Timothy R. Weiand" <timothy.weiand@xxxxxxxxx>
Date: Fri, 14 Jul 2017 15:13:10 +0000
I am building a DR-TUN configuration to load balance DNS traffic. My issue is with the real servers: the ipip packet get unwrapped and appears on the tunnel interface and becomes a martian. Also, I h