LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

RE: Problems with DIP and VIP on different subnets

To: "LinuxVirtualServer.org users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: RE: Problems with DIP and VIP on different subnets
From: "Chris" <Chris@xxxxxxxxxxxxxx>
Date: Wed, 6 Aug 2003 15:44:24 +0100
-> What is the output of "ipvsadm" in your desired configuration (using
-> the x.y.237.234 VIP)?

IP Virtual Server version 1.0.9 (size=4096)
Prot LocalAddress:Port Scheduler Flags
  -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
FWM  1 wrr persistent 300
  -> localhost:http               Local   1      0          0

The configuration may have changed slightly - isp is fiddling.

Basically, why does it not work when the VIP is outside the subnet of the DIP?

for example, 
RIP 192.168.1.1/255.255.255.0
VIP 192.168.1.2/255.255.255.0
Works fine.

RIP 192.168.1.1/255.255.255.0
VIP 192.168.2.2/255.255.255.0
Does not work.

Any ideas?

-----Original Message-----
From: John Cronin [mailto:jsc3@xxxxxxx]
Sent: 06 August 2003 15:24
To: LinuxVirtualServer.org users mailing list.
Subject: Re: Problems with DIP and VIP on different subnets


On Wed, Aug 06, 2003 at 03:08:41PM +0100, Chris wrote:
-> 
-> We are running an LVS box at a remote data centre.
-> 
-> Unfortunately, the ISP uses a standard block of single addresses for the 
machines and additional IP addresses are in an external block that get 
forwarded as needed.
-> 
-> The IP of the director is x.y.254.15/255.255.255.169
-> The VIP is x.y.237.234/255.255.255.255
-> 
-> The DIP works fine. The VIP does nothing.
-> 
-> When I do an ifconfig, the VIP is never listed.

That right there is a problem.  The VIP is not going to work if it is
not shown by ifconfig, because that means the VIP is not configured.

-> If I put the VIP to x.y.254.10 it works perfectly but the ISP will not let 
me have that address.
-> 
-> I have manually created an ifcfg-eth0:1 to set-up the x.y.237.234 and this 
works but only as another DIP not as a VIP. I have tried to use firewall marks 
to extract the packets from this but no luck there either.

So the network hardware and routing part of the equation is working, but
for some reason your VIP is not getting configured.  This indicates a
software and/or configuration issue.

What is the output of "ipvsadm" in your desired configuration (using
the x.y.237.234 VIP)?

-- 
John Cronin
mailto: `echo NjsOc3@xxxxxxxxxxx | sed 's/[NOSPAM]//g'`
_______________________________________________
LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to http://www.in-addr.de/mailman/listinfo/lvs-users

Berkeley Alexander
Temple House, 25-26 High Street, Lewes, East Sussex, BN7 2SD
Tel 01273 477784, Fax 01273 478994
www.baonline.co.uk

PLEASE NOTE:
The information in this e-mail is confidential and may be legally privileged. 
It may not represent the views of Berkeley Alexander. It is intended solely for 
the addressees. Access to this e-mail by anyone else is unauthorised. If you 
are not the intended recipient, any disclosure, copying, distribution or any 
action taken or omitted to be taken in reliance on it, is prohibited and may be 
unlawful. Any unauthorised recipient should advise the sender immediately of 
the error in transmission.

<Prev in Thread] Current Thread [Next in Thread>