LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: No connection through the LVS

To: "'lvs-users@xxxxxxxxxxxxxxxxxxxxxx'" <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: No connection through the LVS
Cc: Tim Burke <burke@xxxxxxxxxxx>
From: Tim Burke <burke@xxxxxxxxxxxxxxxxxxxxxxxx>
Date: Wed, 01 Mar 2000 09:15:30 -0500
A few suggestions:

There is a front end to LVS configuration in RedHat called Piranha.  You can 
use that to create the necessary /etc/lvs.cf
configuration file.  It also includes a set of utilities called pulse and nanny 
which will automatically issue the
necessary ipvsadm commands.  This way you don't have to do that manually each 
time.  If you go to the RedHat support site and
search for Piranha you will find a link to their Piranha HOWTO guide.

In RedHat, there is a script /etc/rc.d/init.d/pulse which needs to be run each 
time to startup the pulse + nanny daemons.  In
order to do this you have to create the necessary links in rc3.d, rc4.d, rc5.d 
to startup/shutdown the pulse daemon.

In order to avoid having to do this command each time you boot:
echo "1" > /proc/sys/net/ipv4/ip_forward
You can change this parameter in /etc/sysconfig/network:
FORWARD_IPV$="yes"

The `ipchains` command can be placed at the end of /etc/rc.d/rc.local to be 
automatically issued on each boot.  While on the
topic of the ipchains command, the one thing that threw me off was that the 
examples in the HOWTO's look something
like what you cite:
/sbin/ipchains -A forward -j MASQ -s 172.1.0.0/24 -d 0.0.0.0/0

What isn't explicitly stated anywhere is that if your public network is not 
eth0 (corresponding to -d 0.0.0.0/0) then you need
to designate the public interface in the -d parameter.  For example, on my 
system I had to specify '-d 192.161.1.0'
in order to get things working. Another useful `ipchains` tip is to include the 
-l flag in the command line.  This causes
logging info to /var/log/messages which is useful for diagnosing problems.  You 
should disable that flag once you're
operational.

Finally, I also found it necessary to include the following kernel option under 
network options:
IP: alias

--
Tim Burke                                      Tel. 978-446-9166 x232
Mission Critical Linux, LLC                    burke@xxxxxxxxxxx
http://www.missioncriticallinux.com


<Prev in Thread] Current Thread [Next in Thread>