|
Hello,
On Wed, 16 Jan 2002, Jean Paul Piccato wrote:
> Hello,
> I'm trying to setup a LVS...
> I think you've done a good work, the HOW-TO is very helpful and clair...
> but... I've a trouble...
> I'm setting up a DR_LVS with a director and two servers...
> I've to handle the ARP problem so I've put two NIC on the two
> realservers...
Please, don't do it in this way. This works may be only with
Linux 2.0. For 2.2+ you need specific kind of ARP control:
http://www.linuxvirtualserver.org/~julian/#hidden
In Linux 2.2+ the operation of adding IP address involves
the following 2 steps:
1. Define a local IP address as a host property - remote hosts can
talk to it through any device
2. Define network link route on the specified device - you can talk
with other hosts from this local network only through this device
(1) allows the Linux 2.2+ box to send ARP replies
through any device that received the reply. Additionally,
the user can provide some filtering by setting some device
specific values:
/proc/sys/net/ipv4/conf/*/<FLAG>
They are explained in /usr/src/linux/Documentation/networking/ip-sysctl.txt
The LVS setups depend mostly on the FLAGs rp_filter, hidden, arp_filter,
send_redirects. On problems check them after learning what they
mean and how they can kill your setup.
By setting rp_filter or arp_filter on some device you can
ignore the ARP requests (and the traffic if rp_filter is set)
coming from addresses if we don't have a route to these addresses
through the mentioned above device.
The send_redirects values must be checked for setups playing
with NAT on one physical medium.
How hidden works you can read from hidden.txt
> It seems that eth0 reply to the server instead of eth1!!!
Any device can reply if the ARP probe is not filtered.
See hidden.txt from the above URL
> Excuse me in the case this is not pertinet to the mailing list...
You are asking the right list. You can also browse with
google for some Linux 2.2+ networking stuff. Search for Linux Advanced
Routing.
> Thank you
> Jean Paul
Regards
--
Julian Anastasov <ja@xxxxxx>
|
