LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: rc.lvs_nat errors

To: lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Subject: Re: rc.lvs_nat errors
From: Roberto Nibali <ratz@xxxxxxxxxxxx>
Date: Wed, 16 Jan 2002 00:41:58 +0100
Hello,

> I'm not using iproute2. I'm using ifconfig/route (via Joe's configure
> script)

Could you please also give me the output of 'ip addr show'?

> #               ________
> #              |        |
> #              | client |
> #              |________|
> #           CIP=eth0 10.139.60.1
> #                  |
> #                  |
> #        VIP=eth1:121 10.139.60.121/22

Could you change the netmask to /32?

> #              __________
> #             |          |
> #             | director |
> #             |__________|
> #        DIP=eth0:1   192.168.1.1
> #                  |
> #                  |
> #                  |
> #         --------------------------------------------------
> #         |                 |                |             |
> #         |                 |                |             |
> #     RIP1=eth0         RIP2=eth0          RIP3=eth0    RIP4=eth0
> #    192.168.1.2      192.168.1.3       192.168.1.4   192.168.1.5
> #   ______________    ______________    ___________   ___________
> #  |              |  |              |  |           | |           |
> #  | realserver1  |  | realserver2  |  |   rs3     | |    rs4    |
> #  |______________|  |______________|  |___________| |___________|
>
> I'm using the LVSCONF_FORMAT=1.1. The lvs_nat.conf template suggests an
> alias for the VIP and the DIP. In this case, I don't think they are
> 'secondary', but I assumed supplying the alias wouldn't be a problem.

This I don't know. I'm not very familiar with Joe's scripts.

> I'm new to this, so please bare with me. I am using VS-NAT, so I assume
> all traffic comes back through my director. Without the default GW I
> don't get any traffic back to my clients. I think friday's discussion
> was for VS-TUN??? In install_director_gw() this code section is
> commented out:

Reading your setup you shouldn't need a DGW at all. Packets from
VIP:VIPPORT are forwarded to a RS of choice. And they route it back to
DIP. And it should get masq'd.

> IP Virtual Server version 0.8.2 (size=4096)
> Prot LocalAddress:Port Scheduler Flags
>   -> RemoteAddress:Port             Forward Weight ActiveConn InActConn
> TCP  10.139.60.121:4300 rr
>   -> 192.168.1.5:4300               Masq    1      0          3
>   -> 192.168.1.4:4300               Masq    1      0          3
>   -> 192.168.1.3:4300               Masq    1      0          3
>   -> 192.168.1.2:4300               Masq    1      0          3

Hmm, ok this indicates that the packets at least get back to the
director. Could you please show me a 'iptables -n -t nat -L'?

Best regards,
Roberto Nibali, ratz



<Prev in Thread] Current Thread [Next in Thread>