Hi,
I have noticed that the directions for setting up IPVS with
direct routing use an interface alias on the loopback interface
to enable the real servers to accept traffic for the virtual IP.
It seems that with this configuration if the interface on Linux Director
with the virtual IP is on the same LAN as the real servers then
ARP requests for this IP address appear to be replied to by
both the Linux Director and the real servers, hence, traffic
is not necessarily arbitrated by the Linux Director.
I have been able to get around this problem by removing the
interface alias on the real servers and setting up a redirect,
using ipchains of the form:
ipchains -A input -j REDIRECT <port> -d <virtual-ip-address> <port>
This has the down side that the real servers essentially have
to be Linux boxes to support this feature but it has the
up side that the Linux Director can easily be moved to
any machine on the LAN as it does not have to have an interface
on a network other than the LAN. This has important implications
in being able to fail over the Linux Director in a case of failure.
--
Horms
----------------------------------------------------------------------
LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
To unsubscribe, e-mail: lvs-users-unsubscribe@xxxxxxxxxxxxxxxxxxxxxx
For additional commands, e-mail: lvs-users-help@xxxxxxxxxxxxxxxxxxxxxx
|