LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

RE: SSL Virtualhosting

To: <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: RE: SSL Virtualhosting
From: "Ryan D. Hatch" <Ryan@xxxxxxxxxxxxxxxxxxxx>
Date: Mon, 10 Sep 2001 22:27:03 -0600
Joeseph, I followed your instructions, and this is what I did. It still
don't work.

my config file config1 looks like this:
#----------config1.conf----------------------------------------
LVSCONF_FORMAT=1.0
LVS_TYPE=VS_DR
INITIAL_STATE=on
CLEAR_IPVS_TABLES=yes
VIP=eth0:34 x.x.x.34 255.255.255.255 x.x.x.34
DIRECTOR_INSIDEIP=eth0 x.x.x.35 x.x.x.0 255.255.255.128 x.x.x.127
SERVICE=t telnet rr x.x.x.36 x.x.x.37
SERVER_VIP_DEVICE=lo:34
SERVER_NET_DEVICE=eth0
SERVER_GW=x.x.x.1
#----------end config1.conf------------------------------------

and my second file config2 looks like this:

#----------config2.conf----------------------------------------
LVSCONF_FORMAT=1.0
LVS_TYPE=VS_DR
INITIAL_STATE=on
CLEAR_IPVS_TABLES=no
VIP=eth0:17 x.x.x.17 255.255.255.255 x.x.x.17
DIRECTOR_INSIDEIP=eth0 x.x.x.35 x.x.x.0 255.255.255.128 x.x.x.127
SERVICE=t https rr x.x.x.36 x.x.x.37
SERVER_VIP_DEVICE=lo:17
SERVER_NET_DEVICE=eth0
SERVER_GW=x.x.x.1
#----------end config2.conf------------------------------------

so, i run the following (running configure 0.8)

$>configure config1.conf -i
(type in passwords for ssh)

$>configure config2.conf -i
(type in more passwords for ssh)

and then I run ipvsadm to add second https host (configure .8 bug)
$>ipvsadm -a -t x.x.x.17 -R x.x.x.37 -g -w 1

I then look at the ipvsadm config..

$>ipvsadm
        IP Virtual Server version 0.8.1 (size=4096)                    
        Prot LocalAddress:Port Scheduler Flags                         
          -> RemoteAddress:Port             Forward Weight ActiveConn
InActConn
        TCP  x.x.x.17:0 rr persistent 360
          -> x.x.x.36:0 Route   1      0          0         
          -> x.x.x.37:0 Route   1      0          0         
        TCP  x.x.x.34:telnet rr
          -> x.x.x.36:telnet Route   1      0          0         
          -> x.x.x.37:telnet Route   1      0          0        

Looks good right? Well I can telnet to x.x.x.34 and get x.x.x.36 and
x.x.x.37 like I should, but when I try to go to https://x.x.x.17 it just
sits there. (I also tried the whole thing with telnet. It does the
same).

I did an ifconfig, and here is what it looks like;
eth0      Link encap:Ethernet  HWaddr 00:40:49:42:05:71  
          inet addr:x.x.x.35  Bcast:x.x.x.127  Mask:255.255.255.128
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:11509 errors:0 dropped:0 overruns:0 frame:0
          TX packets:7758 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          Interrupt:11 

eth0:16   Link encap:Ethernet  HWaddr 00:40:49:42:05:71  
          inet addr:x.x.x.16  Bcast:x.x.x.16  Mask:255.255.255.255
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:11 

eth0:17   Link encap:Ethernet  HWaddr 00:40:49:42:05:71  
          inet addr:x.x.x.17  Bcast:x.x.255.255  Mask:255.255.255.255
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:11 

eth0:34   Link encap:Ethernet  HWaddr 00:40:49:42:05:71  
          inet addr:x.x.x.34  Bcast:x.x.255.255  Mask:255.255.255.255
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:11 

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:52 errors:0 dropped:0 overruns:0 frame:0
          TX packets:52 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 


Wheewww. That was a long one. Any ideas?

Thanks in advance.

Ryan

-----Original Message-----
From: Joseph Mack [mailto:mack.joseph@xxxxxxx]
Sent: Monday, September 10, 2001 11:46 AM
To: lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Subject: Re: SSL Virtualhosting


"Ryan D. Hatch" wrote:
> 
> How do I make another VIP with JM's configure script? 

I plan on a solution where all VIP's will be in the one conf file,
but it won't be for a while I'm afraid

1. setup your first conf file for VIP1
2. run your new rc.lvs file, check that the LVS works, 
       save your rc.lvs and lvs.conf files as unique names
3. setup your 2nd conf file for VIP2 with CLEAR_IPVS_TABLES=NO (instead
of YES)
4. goto step 2 

I haven't tested this with the version I released the other day v0.9.x, 
let me know how it goes.

Joe

-- 
Joseph Mack PhD, Senior Systems Engineer, Lockheed Martin
contractor to the National Environmental Supercomputer Center, 
mailto:mack.joseph@xxxxxxx ph# 919-541-0007, RTP, NC, USA

_______________________________________________
LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to http://www.in-addr.de/mailman/listinfo/lvs-users


<Prev in Thread] Current Thread [Next in Thread>