We are using keepalived 0.7.6 to provide load balancing and failover for
two citrix terminal servers. The setup looks like this:
207.156.7.15 -lvs-> 192.168.0.211 or 192.168.0.212
207.156.7.68 -nat-> 192.168.0.211
207.156.7.69 -nat-> 192.168.0.212
The problem is that after a matter of time, 207.156.7.69 stops allowing
citrix-ica connections - tcpdump shows that the connection is reset.
However, I can still connect to the 192.168.0.212 IP from the LVS
server, so it does not appear to be a citrix related problem. If I
restart keepalived, 207.156.7.69 starts working again. I find this
confusing since only iptables should be manipulating traffic coming to
that address.
I'm attaching both our iptables script and our keepalived.conf. Any
suggestions would be most appreciated.
- David.
iptables
Description: Text Data
keepalived.conf
Description: Text document
|