|
Hello,
On Wed, 1 Nov 2000, Ard van Breemen wrote:
> Allright, it seems you are right. But still, the question the remains:
> is arp a problem? Arp is a lowlevel mac<->ip resolution protocol intended
> to resolve local subnet traffic. Since routing happens on the ip layer,
> no harm is done...:
> Explanation:
> Machinelist:
> MACHINE MAC Real-IP Virtual IP Director IP
> router 0:d0:b7:26:b7:77 192.168.1.105/24
> machine1 0:d0:b7:b5:4:22 192.168.1.159/24 192.168.16.2/24 192.168.1.156/24
> machine2 0:d0:b7:b5:6:c2 192.168.1.160/24 192.168.16.2/24
> machine3 0:d0:b7:b5:3:e7 192.168.1.162/24 192.168.16.2/24
>
...
> Real server3 arps router with source=VIP:
> 17:16:31.897060 0:d0:b7:b5:3:e7 ff:ff:ff:ff:ff:ff 0806 60: arp who-has
> 192.168.1.105 tell 192.168.16.2
> Router replies to arp:
> 17:16:31.897078 0:d0:b7:26:b7:77 0:d0:b7:b5:3:e7 0806 42: arp reply
> 192.168.1.105 is-at 0:d0:b7:26:b7:77
> 17:16:31.897122 0:d0:b7:b5:4:22 0:d0:b7:26:b7:77 0800 74: 192.168.16.2.80 >
> 192.168.1.105.3986: S 2984323950:2984323950(0) ack 2981277924 win 32120 <mss
> 1460,sackOK,timestamp 43613365[|tcp]> (DF)
> Real server2 arps router with source=VIP:
> 17:16:31.897136 0:d0:b7:b5:6:c2 ff:ff:ff:ff:ff:ff 0806 60: arp who-has
> 192.168.1.105 tell 192.168.16.2
> Router replies to arp:
> 17:16:31.897169 0:d0:b7:26:b7:77 0:d0:b7:b5:6:c2 0806 42: arp reply
> 192.168.1.105 is-at 0:d0:b7:26:b7:77
Yes, your router is "good" just like a Linux router: the
ARP REPLY is send to the MAC address of the real server and not to
the VIP (192.168.16.2).
> I want to be right on this that I don't have an arp-problem (I have arps,
> but without problems). Because if I am wrong, I have to rethink carefully
> what I have to do next. So if you still think I am wrong, I want to know
> about it!
You can safely run LVS in your environment without using the
"hidden" flags in the real servers.
> --
> Ard van Breemen, T(elegraaf)E(lektronische)M(edia)
> http://www.faqs.org/rfcs/rfc1855.html
> **THIS E-MAIL MESSAGE IS VIRUS FREE BY COMPLYING TO THE ASCII STANDARD**
Regards
--
Julian Anastasov <ja@xxxxxx>
|
