I have been told by our network guys here (and I hope to confirm this once
I find a copy of the hidden patch) that Cisco routers use dynamic ARP
caching. This means, the router will place an entry into its ARP cache
any time it sees a particular MAC/IP address combination, without
ever issuing an explicit ARP and receiving a response. This of course
will break DR LVS's, since silencing ARP on the real server is no longer
sufficient to keep it's MAC address out of the router's ARP cache.
Has anyone else run into this and found a solution?
I tried setting up a NAT LVS, but when I did this, all the connections
to the real servers appeared to come from the director, so I lose information
about who the client is. Since what I'm setting up is an anti-spam mail
cluster, I have to have access to the client's IP address from inside
the real server SMTP application (postfix in this case).
--Greg
|