> What kind of service are you planing to loadbalance ? smtp, http, ssl, ...?
HTTP, HTTPS, FTP, IMAP, POP3, SMTP
I plan on using Direct routing
Two LVS Servers
4 Worker machines
1 Network Appliance Netfiler 720 with the data
Everything connected with a cisco 3548XL switch.
Each worker machine will have a seperate 10/100 NIC for NFS to the NetApp
which has a 1000Base-T connection to the switch.
I plan on routing a subnet to the cluster VIP from our router and LVS the
subnet to the working machines.
Example:
LVS VIP = 204.97.12.5
Clustered Subnet = 204.213.240.0/27
Worker machines = 204.97.12.6 - 9
Cisco has this static route.
ip route 204.213.240.0 255.255.255.224 204.97.12.5
The lvs servers are arp'ing for 204.97.12.5 and have either sub-interfaces
or fwmark settings for the 204.213.240/27 subnet. Working machines are
also on the 204.97.12.x network with dummy aliased interfaces for the
subnet. I don't think I need the worker machines listening for
204.97.12.5 at all because they won't be getting any direct traffic on
that. If an lvs server crashes heatbeat should switch to the lvs server
which can arp for 204.97.12.5 and pickup the subnet from the router.
Does this scheme make sense? Will it work?
Each worker machine own 2 NIC, one directly connected to your appliance and
the other to the switch ?
=> or your two NIC interfaces are in the same 204.97.12.0/27 subnet
directly connected onto the switch ?
so you are using 204.97.12.6 204.97.12.7 204.97.12.8 204.97.12.9
204.97.12.10 204.97.12.11 204.97.12.12 204.97.12.13 for your worker
machines. So you use a 1Gb interface to handle simultaneous bandwidth
(agregation) with your workers machine. All the net interface are in the
same network.
If the WAN clients users (for your loadbalanced service : smtp, pop, imap,
http, ssl, ftp) do not use more than 100 MBit/s bandwitdth, the LVS direct
routing is not needed. You can use a simple LVS NAT because all the servers
are on the same network bus and if a server want to talk with another
server on the same bus (netapp) then an icmp redirect will be sent and you
will not bridge directly the traffic with your LVS.
Hopes it will help you,
Regards,
Alexandre
|