LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re lvs tun giving problems .. pls help

To: lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Subject: Re lvs tun giving problems .. pls help
From: "khiz nms" <khiznms@xxxxxxxxxxxxxx>
Date: 2 Jan 2002 05:46:24 -0000
guys pls help me out  
i dunno what wrong i m doing 
pls help me out
tearing my hair
Khiz


On Tue, 01 Jan 2002 khiz  nms wrote :
> 
> Hi all 
> i m facing a problem with my TUN setup 
> 
> my real server is on a seperate network from the 
> director and is not prone to the ARP problem coz there 
> is no routing for the VIP which leads to the 
> realserver's network!! 
> realserver is redhat 6.2 VIP 202.120.130.102 
> 
> ipvsadm is correctly configured for tunnelling to the 
> RIP and this i have verified by using tcpdump on the 
> Realserver and i see packets CIP->RIP hitting the 
> realserver 
> 
> tcpdump on realserver 
> eth2 < 10.1.5.5.2051 > 202.120.130.102.www: S 
> 421444096:42144409 6(0) win 65535 <mss 1460> (DF) (ipip)
>  
> 
> where 10.1.5.5 is CIP  202.120.130.102 is the VIP 
> 
> the director has only one NIC configured with VIP 
> result of ipvsadm .. the director and the realserver 
> dont have any network in common so the arp problem does 
> not exist in my case
> 
> IP Virtual Server version 1.0.8 (size=32768) 
> Prot LocalAddress:Port Scheduler Flags 
> -> RemoteAddress:Port Forward Weight ctiveConn 
> InActConn 
> TCP 202.120.130.102:www rr 
>  -> 10.1.11.225:www     Tunnel  4      0          2     
> 
> 
> However connections from the client seem to hang 
> 
> IP spoofing is enabled on the routers because doing 
> traceroute -n -s VIP someother IP  FROM  the REALSERVER 
> 
> result in icmp port unreachable messages occuring on 
> the Director which only arps for the VIP.. this impies 
> that spoofing of VIP from REALSERVER is permitted 
> 
> i have configured VIP on tunl0 of REALSERVER 
> 
> telnet VIP www  from realserver itself is also 
> successful 
> 
> 
> ifconfig on REALSERVER gives 
> eth2  blah blah 10.1.11.225 
> tunl0     Link encap:IPIP Tunnel  HWaddr 
>          inet addr:202.140.120.102  
> Mask:255.255.255.255 
>          UP RUNNING NOARP  MTU:1480  Metric:1 
> 
> route -n shows on REALSERVER 
> 202.120.130.102 0.0.0.0         255.255.255.255 UH    0 
>      0        0 tunl0 
> 10.1.11.225     0.0.0.0         255.255.255.255 UH    0 
>      0        0 eth2 
> 10.1.11.0       0.0.0.0         255.255.255.0   U     0 
>      0        0 eth2 
> 127.0.0.0       0.0.0.0         255.0.0.0       U     0 
>      0        0 lo 
> 0.0.0.0         10.1.11.51      0.0.0.0         UG    0 
>      0        0 eth2 VIP 
> 
> a route to the VIP exists with dev tunl0 ( only one VIP 
> in use on the realserver) 
> 
> ip forwarding enabled on realserver 
> lsmod shows ipip ;-) 
> i dunno whats wrong with the configuration 
> pls help me out 
> BTW realserver is 6.2 redhat  2.2.14-5.0  ipip is a 
> module 
> 
> TIA 
> Khiz 
> P>S the only commands i used on the director 
> ipvsadm -A -t 202.120.130.102:80 -s wlc 
> ipvsadm -a -t 202.120.130.102:80 -r 10.1.11.225 -i 
> 
> i did not use any configure script .. this seems fine 
> coz the director is actaully passing tunnelled packets 
> to the Realserver..hope i m right 
> 
>  
> 
> 
> _______________________________________________
> LinuxVirtualServer.org mailing list - 
> lvs-users@xxxxxxxxxxxxxxxxxxxxxx
> Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
> g
> or go to http://www.in-addr.de/mailman/listinfo/lvs-user-
> s
 



<Prev in Thread] Current Thread [Next in Thread>