|
Joseph Mack wrote:
Cyrille Mertes wrote:
Well, I'm using iptables on my director like a standard firewall, but I
have absolutely no rules for redirection.
I haven't been following this one.
Does it work without the filter rules?
Joe
Actual LB : redhat 8.0, kernel 2.4.18-14, IP Virtual Server version
1.0.4 (source), piranha-0.7.0-3 (source)
The problem is that the server stops balancing the requests, some times it
stops only on one virtual server and continues balancing correctly on the
others. When it stops balancing it sends all the requests to one of the
real servers (always the same) and stops showing anything in ipvsadm.
It can stop 3 times in one hour, and after it can take 4 hours before
stopping again.
Here is output of ipvsadm when everything is ok :
IP Virtual Server version 1.0.4 (size=65536)
Prot LocalAddress:Port Scheduler Flags
-> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP 216.187.127.124:http wrr
-> gragra.privatedns.com:http Route 2 182 369
-> motti.privatedns.com:http Route 1 81 171
-> koon.privatedns.com:http Route 1 66 180
TCP 216.187.127.122:http wrr
-> gragra.privatedns.com:http Route 1 169 408
-> motti.privatedns.com:http Route 2 292 781
-> koon.privatedns.com:http Route 2 256 752
And when pulse stop balancing on .122, all the requests are directed to
the same real server :
IP Virtual Server version 1.0.4 (size=65536)
Prot LocalAddress:Port Scheduler Flags
-> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP 216.187.127.124:http wrr
-> gragra.privatedns.com:http Route 2 182 369
-> motti.privatedns.com:http Route 1 81 171
-> koon.privatedns.com:http Route 1 66 180
TCP 216.187.127.122:http wrr
-> gragra.privatedns.com:http Route 1 0 0
-> motti.privatedns.com:http Route 2 0 0
-> koon.privatedns.com:http Route 2 0 0
Like I said, I have no iptables filter rules and I'm not sure to
understand what kind of rules I need.... and if it can solve my problem.
If I ping my VIPs from another machine, then run `arp -a` and see the
MAC address for the VIPs, the mac adress matches the mac adress on my
Director so I think I'm not affected by the arp problem.
Thanks for your help.
Cyrille.
|
