LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: problem accessing real servers

To: "LinuxVirtualServer.org users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: problem accessing real servers
From: Horms <horms@xxxxxxxxxxxx>
Date: Mon, 11 Aug 2003 10:15:36 +0900
On Sun, Aug 10, 2003 at 10:03:43AM -0700, Ravi Kumar Munnangi wrote:
> Horms,
>   I have selected LVS-NAT option.
>   So, there is no need to check for problems regarding answering of arp 
> requests.
>  Please think of some other solution!

If you are using LVS-NAT and your end-users are on the same network
as the Linux Director and the Real Servers then the Linux Director
is probably sending ICMP redirects. You should be able to disable
this behaviour using /proc.

The next problem is that you have to make sure that when
the Real Server replies it sends the reply packets to the Linux
Director and not directly to the End-Users. The latter will not
work as the packets will not have been un-natted. Usually
this will invlove some routing fun and games on the Real Servers.

There is an entry in the HOWTO on this:
http://www.linuxvirtualserver.org/Joseph.Mack/HOWTO/LVS-HOWTO.LVS-NAT.html#one_network

However, my recommendation is that if you want to have Real Servers
and End Users on the same network, use LVS-DR. It is fundamentally
better suited to this kind of work.


-- 
Horms
<Prev in Thread] Current Thread [Next in Thread>