LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: rsh on a NAT cluster

To: Stephen Rowles <spr@xxxxxxxxxxxxxxx>
Subject: Re: rsh on a NAT cluster
Cc: lvs-users@xxxxxxxxxxxxxxxxxxxxxx
From: Joseph Mack <mack@xxxxxxxxxxx>
Date: Mon, 9 Oct 2000 08:52:47 -0400 (EDT)
On Mon, 9 Oct 2000, Stephen Rowles wrote:

> Some scripts that we run need to connect to the cluster and run remote 
> scripts (for compilation etc.)

Do you mean that the rsh service is LVS'ed and that you rsh to the VIP and
wind up on a random realserver and run your script?

> Anybody know of any problems running rsh on a NAT cluster.

LVS'ing rsh works fine on VS-DR. However rsh does a callback to the client
(as was pointed out to me in an offline discussion with someone whose name
I've forgotten, John Maus?). With VS-NAT you have to make sure that your
ipchains commands which setup the services on the real-servers, include
only the IPs and ports needed for the LVS services, and not the whole
network. If you nat the whole network and all ports, the rsh callback will
be NAT'ed in the reverse direction only and your rsh connection will hang.
The callback needs to go directly to the client, so the RIP on the
real-server must be routable.

Thus for each real-server and each service, run a line like this.

$IPCHAINS -A forward -p tcp -j MASQ -s RIP telnet -d 0.0.0.0/0

Joe

--
Joseph Mack mack@xxxxxxxxxxx



<Prev in Thread] Current Thread [Next in Thread>