mrds@xxxxxxxxxxxx wrote:
> Hi, I have a question about Linux Director.
>
> - "ping" is O.K !! (Linux Director (LD) --> Real Servers (RS) / RS --> LD)
>
> - request packet NAT is O.K !! (client --> LD --> RS ; destination
> address is changed in th LD)
>
> - but the problem is "response NAT (demasq.)" !! ( client <-- LD <-- RS ;
> response packet is NOT changed !!)
Have you used ipchains to enable the kernel 2.2 to accept the masquerading
packets from 192.168.1.0/24 network?
Wensong
>
>
> Mmm, My isolated network and experimental environment is following.. help
> me, now.
>
> ======================================================================
>
> client (203.248.108.7)
> | (P2-300/ Windows 98)
> |
> |
> Linux Director (eth0: 203.248.108.11 / eth1: 192.168.1.1)
> B O X (P2-400/ Linux 2.2.9/ VS-0.4)
> |
> |
> H U B (16 ports)
> | |
> +---------+ +-----------------+
> | |
> | |
> Real Server1 Real Server2
> (192.168.1.4) (192.168.1.2)
> (P2-300/ Linux 2.0.36) (SPARC4/ SunOS 5.5.1)
>
> ============================================================
> Linux Director Status is ...
>
> # ipvsadm -L (Linux Director)
> --------------------------------------------------------------------------------------------------------------
> IP Virtual Server (Version 0.4)
> TCP 203.248.108.11:80 wlc
> -> 192.168.1.4:80 Masq 1 0+0
> -> 192.168.1.2:80 Masq 1 0+0
>
> # ipconfig -a (Linux Director)
> --------------------------------------------------------------------------------------------------------------
> eth0 Link encap:Ethernet HWaddr 00:10:4B:8E:7E:92
> inet addr:203.248.108.11 Bcast:203.248.108.255
> Mask:255.255.255.0
> UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
> RX packets:17712 errors:6 dropped:0 overruns:0 frame:7
> TX packets:1731 errors:0 dropped:0 overruns:0 carrier:45
> collisions:2 txqueuelen:100
> Interrupt:11 Base address:0xec80
>
> eth1 Link encap:Ethernet HWaddr 00:10:5A:6D:97:FB
> inet addr:192.168.1.1 Bcast:192.168.1.255 Mask:255.255.255.0
> UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
> RX packets:1523 errors:0 dropped:0 overruns:0 frame:0
> TX packets:846 errors:0 dropped:0 overruns:0 carrier:12
> collisions:1 txqueuelen:100
> Interrupt:10 Base address:0xec00
>
> lo Link encap:Local Loopback
> inet addr:127.0.0.1 Mask:255.0.0.0
> UP LOOPBACK RUNNING MTU:3924 Metric:1
> RX packets:99 errors:0 dropped:0 overruns:0 frame:0
> TX packets:99 errors:0 dropped:0 overruns:0 carrier:0
> collisions:0 txqueuelen:0
>
> # netstat -rn (Linux Director)
> --------------------------------------------------------------------------------------------------------------
> Kernel IP routing table
> Destination Gateway Genmask Flags MSS Window
> irtt Iface
> 192.168.1.1 0.0.0.0 255.255.255.255 UH 0 0
> 0 eth1
> 203.248.108.11 0.0.0.0 255.255.255.255 UH 0 0
> 0 eth0
> 192.168.1.0 0.0.0.0 255.255.255.0 U 0 0
> 0 eth1
> 203.248.108.0 0.0.0.0 255.255.255.0 U 0 0
> 0 eth0
>
> 127.0.0.0 0.0.0.0 255.0.0.0 U 0 0
> 0 lo
>
> ============================================================
>
> Real Servers network status is...
> --------------------------------------------------------------------------------------------------------------
> # ifconfig -a (Real Server 1)
> --------------------------------------------------------------------------------------------------------------
> lo Link encap:Local Loopback
> inet addr:127.0.0.1 Bcast:127.255.255.255 Mask:255.0.0.0
> UP BROADCAST LOOPBACK RUNNING MTU:3584 Metric:1
> RX packets:98 errors:0 dropped:0 overruns:0 frame:0
> TX packets:98 errors:0 dropped:0 overruns:0 carrier:0
> collisions:0
>
> eth0 Link encap:Ethernet HWaddr 00:60:97:8F:C9:DE
> inet addr:192.168.1.4 Bcast:192.168.1.255 Mask:255.255.255.0
> UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
> RX packets:521 errors:0 dropped:0 overruns:0 frame:0
> TX packets:1100 errors:0 dropped:0 overruns:0 carrier:0
> collisions:1
> Interrupt:5 Base address:0x300
>
> # netstat -rn (Real Server 1)
> --------------------------------------------------------------------------------------------------------------
> Kernel IP routing table
> Destination Gateway Genmask Flags MSS Window irtt
> Iface
> 192.168.1.0 0.0.0.0 255.255.255.0 U 1500 0 0
> eth0
> 127.0.0.0 0.0.0.0 255.0.0.0 U 3584 0
> 0 lo
> 0.0.0.0 192.168.1.1 0.0.0.0 UG 1500 0
> 0 eth0
>
> ==============================================================
>
> # ifconfig -a (Real Server 2)
> --------------------------------------------------------------------------------------------------------------
> lo0: flags=849<UP,LOOPBACK,RUNNING,MULTICAST> mtu 8232
> inet 127.0.0.1 netmask ff000000
>
> le0: flags=863<UP,BROADCAST,NOTRAILERS,RUNNING,MULTICAST> mtu 1500
> inet 192.168.1.2 netmask ffffff00 broadcast 192.168.1.255
> ether 8:0:20:82:23:21
>
> # netstat -rn (Real Server 2)
> --------------------------------------------------------------------------------------------------------------
> Routing Table:
> Destination Gateway Flags Ref Use Interface
> -------------------- -------------------- ----- ----- ------
> ---------
> 127.0.0.1 127.0.0.1 UH 0 0 lo0
> 192.168.1.0 192.168.1.2 U 3 7 le0
> 224.0.0.0 192.168.1.2 U 3 0 le0
> default 192.168.1.1 UG 0 72
>
> ===========================================================
>
> Thank you.
>
> p.s. This mail is attached text format(MyVS.txt), also.
>
> +-----------------------------------------------------------------------------------------------------------------+
> | Daeho Kim
> |
> | job : full time student (BIT education center /Nerwork expert
> class(NX102)) |
> | address: 391-269 ,Daebang-dong ,Dongjak-goo, Seoul, Korea(ROK)
> |
> | zipcode: 156-020
> |
> | Celluler Phone : +82-011-343-1673
> |
> | e-mail : mrds@xxxxxxxxxxxx
> |
> +---------------------------------------------------------------------------+
> Daeho's profile ver. 1.0.0 +
|