LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: able to ping hidden interface

To: "LinuxVirtualServer.org users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: able to ping hidden interface
Cc: horms@xxxxxxxxxxxx
From: Anshul Gupta <tech@xxxxxxxxxxxxxxx>
Date: Mon, 9 Feb 2004 15:42:32 +1100

Thanks a lot for replying.


proc/sys/net/ipv4/conf/lo/hidden and /proc/sys/net/ipv4/conf/all/hidden
are both set to 1, still I am able to ping lo:0 with the VIP
configured. What can be the problem? Because of this nothing is working
in my setup.

Where are you sending the ping packets from?

From the same machine.


Are you seeing arp replies
generated from the machine with the VIP on lo:0?

No. arp -a doesn't list the VIP on both machines.

 Even with the interface
set as hidden unicast arp requests will be honoured. But this should not
be a problem as a linux director should send gratutous arp packets when
failover is effected, thus flushing all the arp caches on the network,
so subsequent unicast requests will be sent to the MAC of the newly
active linux director.

I am using streamline setup (2 machine cluster) with linux kernel 2.4.24 and hidden patched applied. Now as VIP is configured on standby linux director (lo:0), active linux director cannot reach to RIP of standby with VIP as source address.

Active linux director is using VIP as source address and thus removes standby server (also acting as realserver) from the list as it cannot get a reply back.

What can be the problem?

Regards,
Anshul

<Prev in Thread] Current Thread [Next in Thread>