LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

RE: simple example

To: "'LinuxVirtualServer.org users mailing list.'" <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: RE: simple example
From: Peter Mueller <pmueller@xxxxxxxxxxxx>
Date: Tue, 15 Jul 2003 12:56:50 -0700
> I am running linux-2.4.21 with ipsv-1.0.9 patches on the lvs server. 
> real server 1 is a Soalaris 7 system.  I have a test service 
> running on real server 1, port 5000.  (To verify do "telnet 
> peter.cs.andrews.edu
> 5000".)

Your lVS-director sounds fine.

> lvs server is configured with:
>  ipvsadm -L
> IP Virtual Server version 1.0.9 (size=4096)
> Prot LocalAddress:Port Scheduler Flags
>   -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
> TCP  lvs.cc.andrews.edu:5000 rr
>   -> peter.cs.andrews.edu:5000    Route   1      0          0         

Ok, this sounds fine assuming your DNS is ok.

> When I telnet to lvs:5000 InActConn goes to 1.  A sniff on 
> peter showes no traffic coming to it on port 5000.  
> /proc/sys/net/ipv4/ip_forward is set to one even though there 
> is only one interface.

> I have patched, compiled and installed the 2.4.21 kernel and 
> rebooted with it.  I have run ipvsadmin to generate the above 
> tables on the lvs machine.  What else should I do to make this work?

Did you read my last email? Did you read the LVS-DR documentation?  I
haven't seen you do anything to:

1 - Listen on the VIP (virtual IP). e.g., virtual.cs.andrews.edu:5000 needs
to actually be allowed into the box AND your application needs to listen to
the IP.  This means firewall rules.  This also means setting up a virtual
interface or a transparent proxy rule like (in redhat kernels only AFAIK):
$IPTABLES -t nat -A PREROUTING -p tcp -d $VIP --dport 80 -j REDIRECT
--to-port 80
2 - Get rid of ARPing on the real servers if using virtual interfaces via
e.g. Julian's hidden patch (RTM!).

> I expect a "telnet lvs 5000" should pass the connection on to 
> real server 1.  This looked pretty easy in the docs.  What am 
> I missing?

Your tcpdump probably isn't showing anything because the request has
destination address VIP instead of your Real server IP.  Firewall?
<Prev in Thread] Current Thread [Next in Thread>