| 
 
Hello,
 Unfortunately "quit working after some time" is about the best way to 
describe it. All software are original RedHat AS 3.0 rpms:
kernel-2.4.21-15.0.2.EL
iptables-1.2.8-12.3
ipvsadm-1.21-9.ipvs108
piranha-0.7.6-1
 
Fair enough, I believe you; however it does sound kind of unbelieveable 
considering that you're running a Unix-like system which regarding it's 
history has a long and violent path of spitting out all kinds of error 
and warning messages into logfiles. 
 I have static NAT configured for a particular server using this iptables 
command:
iptables -v -t nat -I POSTROUTING -s 172.28.1.25 -j SNAT --to-source 
66.165.220.47
LVS-NAT is configured using the /etc/sysconfig/ha/lvs.conf file which 
appears to be part of the RedHat piranha package. 
I see.
 When I say "quit working after some time" i mean exactly that. After the 
firstor boots everything works just fine. After several hours the director 
ceases to forward packets to the 172.28.1.25 RIP. Things break in both
 
Hmmm, could you enable debug in the proc-fs after such an incident and 
send a couple of lines along (max. 30kb), please. Also send a copy of 
/proc/net/ip_conntrack and /proc/slabinfo. A tcpdump on both physical 
interfaces would be interesting as well plus the link state and 
statistical information such as 'ip -s -s link show' and 'ip -s -s route 
show cache'. Thank you. 
 directions, LVS processed packets as well as packets processed using the 
iptables rule. There is nothing in dmesg indicating there is anything 
wrong.
 
I reckon there's also no kernel oops in kernlog or whereever RH sends 
those dumps? 
 
I cannot find any aparent cause, no trigger for this happening.
Also, I cannot get the director to resume forwarding packets to/from the 
172.28.1.25 RIP by restarting services, reloading iptables, LVS rules, 
etc. The only things that makes a difference is a reboot.
 
That rings a bell however ... what network cards are you using?
 The director is in a production environment. So far the timing of these 
outages hasn't been a"convenient" to do any troubleshooting. 
 
I completely understand. Please provide also your hardware configuration.
 In the documentation I read the floating ip address is the ip address that 
switches between the two directors in a failover configuration. On the
 
0k, thank you, didn't know that. What documentation would you be 
referring to? 
 internal network side of LVS-NAT this would be the default gateway all 
real servers point to. 
 
Yes.
 Correct, but I would like to continue using LVS-NAT, with the directors 
continuing to be default gateways. Reason for this is the ARP problem and 
the fact that there are a variety of OSs on the real servers.
 
I understand, so let's address your initial problem then if you want to. 
 But you have to provide me (us) with more details, especially when 
this incident happens. 
Thank you for your patience,
Roberto Nibali, ratz
--
echo 
'[q]sa[ln0=aln256%Pln256/snlbx]sb3135071790101768542287578439snlbxq' | dc |