|
When you do NAT, you front IP address and real server
IP address can not be in the same network. What is
the netmask on your VIP and RIP?
At 07:39 PM 2/27/2002 +0100, Carlos J. Ramos wrote:
>Hi all, greets.
>
>
>Please, we have a difficult problem, now I m loosed enough to continue.
>
>We have this network with a cluster using LVS-NAT.
>
>
>Doctor-------------------Gateway----------------Director
>eth1 10.253.3.216(CIP) eth0 public IP eth0 public IP
>eth2 public IP eth1 10.253.65.3 eth0:1 10.132.67.194
> eth1:0 10.253.3.200 eth1 10.253.65.18(VIP)
> |
> /----------------------|-----------------|----/
> | | |
>RealServer1 RealServer2 Realserver3
>eth0 10.253.65.7(RIP1) eth0 10.253.65.8(RIP2) eth0 10.253.65.9(RIP3)
>
>On director:
>
># ipvsadm -nl
>
>IP Virtual Server version 1.0.8 (size=4096)
>Prot LocalAddress:Port Scheduler Flags
> -> RemoteAddress:Port Forward Weight ActiveConn InActConn
>TCP 10.253.65.18:80 wlc
> -> 10.253.65.9:80 Masq 1 0 0
> -> 10.253.65.8:80 Masq 1 0 0
> -> 10.253.65.7:80 Masq 1 0 0
>TCP public IP:80 wlc
> -> 10.253.65.9:80 Masq 1 0 0
> -> 10.253.65.8:80 Masq 1 0 0
> -> 10.253.65.7:80 Masq 1 0 0
>
>I had read the LVS howto, and if i try to make a request directly from gateway
>to director, (all in the same network) i had to tunning it with this:
>
># echo 0 > /proc/sys/net/ipv4/conf/all/send_redirects
># echo 0 > /proc/sys/net/ipv4/conf/default/send_redirects
># echo 0 > /proc/sys/net/ipv4/conf/eth0/send_redirects
>
>and delete routes to gateway on the RealServers to obtain response and of
>course: it works fine :)
>
>But the problem is that a i had to make requests from a machine in a different
>network, outside the gateway (doctor). Doctor is able to ping, login through
>ssh... etc. into any machine into the cluster, included director through its
>VIP. But if i try to make requests from this machine, I can see, by using
>tcpdump, request coming to the realservers, but its unable to obtain
>response... :( any
># telnet 10.253.65.18 80
>has no response :((
>
>I had try applying the solution for CIP,VIP,RIPs in the same network, and
>without it (of course, removing and adding the routes into the realservers),
>but it wasnt able to works for me :((
>
>Any help, howtos, url.. its welcome !!
>
>
>Thanks a lot in advance.
>
>--
>--------------------------------------------------------
>Carlos J. Ramos Genasys II Spain, S.A.U.
>Administrador de Sistemas Ventura de la Vega 5
>Tel:+34-91-3649100 ext 170 28014 Madrid
>Fax:+34-91-3649119 Spain
>Email: cjramos@xxxxxxxxxx
>--------------------------------------------------------
>
>
>_______________________________________________
>LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
>Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
>or go to http://www.in-addr.de/mailman/listinfo/lvs-users
|
