On 2000-11-20T21:44:41,
iceam@xxxxxxxxxx said:
> The route output for the real servers is as follows:
> For real 1:
> real1.server.ne * 255.255.255.255 UH 0 0 0 eth0
> 10.1.1.0 * 255.255.255.0 U 0 0 0 eth0
> 127.0.0.0 * 255.0.0.0 U 0 0 0 eth0
> default director.ser 0.0.0.0 UG 0 0 0 eth0
Okay, the director is your default gateway, and you are using masquerading,
and you have everything on the same ethernet segment if I didn't miss
anything.
My guess would be that the load balancer sends ICMP redirects to the clients,
saying "Hey, you can reach that machine directly at this MAC address" - this
shouldn't happen ;), but is a bug in the ipchains masquerading code.
What do your arp -a tables look like?
You can disable this with
echo 0 >/proc/sys/net/ipv4/conf/all/send_redirects
echo 0 >/proc/sys/net/ipv4/conf/eth0/send_redirects
and see whether that helps.
Sincerely,
Lars Marowsky-Brée <lmb@xxxxxxx>
Development HA
--
Perfection is our goal, excellence will be tolerated. -- J. Yahl
|