LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: able to ping hidden interface

To: "LinuxVirtualServer.org users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: able to ping hidden interface
From: Horms <horms@xxxxxxxxxxxx>
Date: Mon, 9 Feb 2004 13:18:37 +0900
On Mon, Feb 09, 2004 at 02:58:27PM +1100, Anshul Gupta wrote:
> Hi All,
> 
> Is there anyone on the list?

Patience is a virtue.

> proc/sys/net/ipv4/conf/lo/hidden and /proc/sys/net/ipv4/conf/all/hidden 
> are both set to 1, still I am able to ping lo:0 with the VIP 
> configured. What can be the problem? Because of this nothing is working 
> in my setup.

Where are you sending the ping packets from?  Are you seeing arp replies
generated from the machine with the VIP on lo:0? Even with the interface
set as hidden unicast arp requests will be honoured. But this should not
be a problem as a linux director should send gratutous arp packets when
failover is effected, thus flushing all the arp caches on the network,
so subsequent unicast requests will be sent to the MAC of the newly
active linux director.

-- 
Horms
<Prev in Thread] Current Thread [Next in Thread>