LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: Help -- confirm correct LVS-NAT packet stream?

To: <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: Help -- confirm correct LVS-NAT packet stream?
From: "Michael Brannigan" <goombah@xxxxxxxxx>
Date: Wed, 27 Feb 2002 22:31:23 -0800
Julian,

Thanks for this - I isolated it to some SQL flakiness, and I now have
LVS/NAT directing 5 MSSQL boxes on Windows 2000, successfully....however...
the connection times are very slow! if I have a realserver connect to
another realserver, the connection happens in sub-second time.. however, a
client machine on the other side of the LVS director experiences ~30 second
connect times.  What gives?

My configuration is a single-NIC director which looks like this:

[] Client machine 192.168.0.1

[] Director VIP 192.168.0.15
Director DIP 10.168.100.1

[][][][][] Realservers 10.168.100.2-6

RSs can ping client
Client cannot ping RSs
Director can ping both
RSs trace to client via director

Director kernel is 2.2.19, running ipvs 1.0.8

Any ideas of things I should check for? Is my above scenario correct? I've
followed the "quick" troubleshooters pretty carefully, but I'm still a linux
newbie, so everytime I've twiddled things, I've broken the config and had to
fallback on the configure script. Nothing is being saturated on the
machine - bandwidth, ram, cpu -- all practically idle.

Thanks in advance,

 - Mike



----- Original Message -----
From: "Julian Anastasov" <ja@xxxxxx>
To: "Michael Brannigan" <goombah@xxxxxxxxx>
Cc: <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Sent: Sunday, February 24, 2002 3:32 AM
Subject: Re: Help -- confirm correct LVS-NAT packet stream?


>
> Hello,
>
> On Sat, 23 Feb 2002, Michael Brannigan wrote:
>
> > here tell me if this tcpdump implies that the packets are at least being
> > passed correctly?
> >
> > -----
> >
> > 192.168.0.1 is the CIP
> > 192.168.0.15 is the VIP
> > 10.168.100.1 is the DIP
> > 10.168.100.2 is the RIP
> >
> > 17:22:08.883012 192.168.0.1.4129 > 192.168.0.15.1433: S
> > 1780830537:1780830537(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
> > 17:22:08.883196 192.168.0.1.4129 > 10.168.100.2.1433: S
> > 1780830537:1780830537(0) win 16384 <mss 1460,nop,nop,sackOK> (DF)
> > 17:22:08.883818 10.168.100.2.1433 > 192.168.0.1.4129: R 0:0(0) ack
> > 1780830538 win 0
> > 17:22:08.883937 192.168.0.15.1433 > 192.168.0.1.4129: R 0:0(0) ack
> > 1780830538 win 0
>
> Yes, the packets look good, may be the real server doesn't
> listen on its own RIP (100.2:1433). This can be a reason for the
> RST replies.
>
> > Thanks!
> >
> >  - Mike
>
> Regards
>
> --
> Julian Anastasov <ja@xxxxxx>
>
>
> _______________________________________________
> LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
> Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
> or go to http://www.in-addr.de/mailman/listinfo/lvs-users


_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com



<Prev in Thread] Current Thread [Next in Thread>