LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: Keepalived/Genhash utility

To: lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Subject: Re: Keepalived/Genhash utility
From: Roberto Nibali <ratz@xxxxxx>
Date: Thu, 06 Feb 2003 15:34:16 +0100
Hi,

I\'d like to set up an HTTP_GET{} to check the real servers.  I\'ve tried the 
following:
genhash -s 11.81.19.44 -p 80 -u /test.html
but this returns nothing!!.  I supect it\'s because apache is configured only to
listen on the VIP not the RIP, as per the instructions in the Mini Howto.
Any ideas on how to resolve this?  Will I break the LVS if I allow apache to 
listen on the RIP as well?

No. LVS is only forwarding packets. You might however expose your RS more then you'd like to. What you might do is add some packet filter rules on the RS:

o drop everything on incoming interface
o allow <UNIVERSE, proto, dstport> ---> <VIP/32, proto, dstport>
o allow <DIP/32,   proto, dstport> ---> <RIP/32, proto, dstport>

If I switch the RIP back on, run genhash, and then switch it back off again 
will this do the trick?

I would say not, because you always want to perform a health check which is presumably done from the director itself.

Also if test.html is the same file copied onto two real servers will genhash 
always return the same checksum on both servers?

It should, but to be honest, I haven't checked it in a while.

It is the responsibility of the recipient to ensure that opening this
message and/or any of its attachments will not adversely affect
its systems. No responsibility is accepted by the Company.

Heck, did your company send vicious emails in the past :)

Cheers,
Roberto Nibali, ratz
--
echo '[q]sa[ln0=aln256%Pln256/snlbx]sb3135071790101768542287578439snlbxq' | dc



<Prev in Thread] Current Thread [Next in Thread>