Sorry, I left a few things without response.
> actually in LVS-NAT, the director knows exactly the state of
> each connection since it sees the packets in each direction.
I had to enable connection tracking and SNAT on the director to allow
the real servers to initiate connections. Is lvs supposed to provide
this functionality to the real servers?
> LVS and netfilter aren't real compatible - they tread on each other's
> toes - look for "Antefacto" in the HOWTO. Be careful here.
I thought that the antefacto patch was what allowed packet filtering on
the director. I don't need that, only the SNAT connection tracking.
> I don't think I understand your question. The application on the
> realserver is in ESTABLISHED and then what happens?
Part of the issue is that for http, the connection doesn't stay open
between page requests. From the testing described in my previous
message, it looks like the active connection counting in lvs isn't
maintaining http sessions as active.
Thanks,
-jrr
|