On ons, 2004-07-07 at 11:50 +0800, Christopher DeMarco wrote:
> Hi all... regarding the 04MAY2004 thread about RHEL AS realservers and
> howto keep arping from horking the LVS...
>
> Why not just comment out the bits of ifup that invoke arp(8) and
> arping(8)? It's not ideal insofar as any system upgrades will need to
> re-clean the ifup code, but to my mind it's the least invasive
> procedure - re-writing clean init scripts will break the entire RH
> point-n-drool configurization functionality that users may want to
> use.
why not use arptables? it's a supported package and does the job. (I
did make a fool of myself and blocked only incoming requests, so I got
bitten by the gratuitous ARP from ifup myself, but I deserved that.)
the package name is arptables_jf for some reason.
> My understanding is that the manipulation of arp caches is the single
> impediment to using RH products with LVS, or are there others?
are there any?
--
Kjetil T.
|