LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Trouble setting up LVS/TUN

To: lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Subject: Trouble setting up LVS/TUN
From: redirecting decoy <redirectingdecoy@xxxxxxxxx>
Date: Tue, 1 Feb 2005 09:54:08 -0800 (PST)
Hello,

I am new to LVS and am having some trouble getting it
setup and running.   
I am attempting to do Tunneling with 2 real machines,
and 1 director (running inside of a uml).

Here is my setup and what I did in an attempt to get
lvs working.

On Director:
########################################################
Interfaces:
eth0      Link encap:Ethernet  HWaddr
FE:FD:C0:A8:0A:6E
          inet addr:192.168.10.110 
Bcast:192.168.10.255  Mask:255.255.255.0
 
eth0:0    Link encap:Ethernet  HWaddr
FE:FD:C0:A8:0A:6E
          inet addr:192.168.10.111 
Bcast:192.168.10.111  Mask:255.255.255.255
 
eth1      Link encap:Ethernet  HWaddr
FE:FD:0A:01:02:02
          inet addr:10.1.2.2  Bcast:10.255.255.255 
Mask:255.255.255.0
 
eth2      Link encap:Ethernet  HWaddr
FE:FD:0A:01:03:02
          inet addr:10.1.3.2  Bcast:10.255.255.255 
Mask:255.255.255.0

lo                inet addr:127.0.0.1  Mask:255.0.0.0
----------------------------------------------------------------------------

The directors Real IP (RIP) is 192.168.10.110.   I
want the VIP to be
192.168.10.111, which I setup using the following
command:

"ifconfig eth0:0 192.168.10.111 netmask
255.255.255.255 broadcast 192.168.10.111 up"

eth1 and eth2 are on private addresses (10.1.x.x) to
access my Real Servers.

I have 2 real servers that I want to use.  I'll call
them N1 and N2 with the ip's
10.1.2.254 and 10.1.3.254.

So I setup lvs using the following:

ipvsadm -A -t 192.168.10.111:80
ipvsadm -a -t 192.168.10.111:80 -r 10.1.2.254:80 -i
ipvsadm -a -t 192.168.10.111:80 -r 10.1.3.254:80 -i

ipvsadm -L -n gives me the following:
----------------------------------------------
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
  -> RemoteAddress:Port           Forward Weight
ActiveConn InActConn
TCP  192.168.10.111:80 wlc
  -> 10.1.3.254:80                Tunnel  1      0    
     0
  -> 10.1.2.254:80                Tunnel  1      0    
     0
----------------------------------------------

So far so good.   Next thing I did was setup the Real
servers.

On the Real Servers:
########################################################
Interfaces: N1 and N2
eth0      Link encap:Ethernet  HWaddr
00:60:08:16:0C:0C  
          inet addr:10.1.(2,3).254 
Bcast:10.255.255.255  Mask:255.0.0.0

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0

tunl0     Link encap:IPIP Tunnel  HWaddr   
          inet addr:192.168.10.111 
Mask:255.255.255.255
          UP RUNNING NOARP  MTU:1480  Metric:1
          RX packets:14 errors:0 dropped:0 overruns:0
frame:0
          TX packets:0 errors:0 dropped:0 overruns:0
carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:780 (780.0 b)  TX bytes:0 (0.0 b)
########################################################

to setup the real servers I did:

modprobe ipip
ifconfig tunl0 0.0.0.0 up
ifconfig tunl0 192.168.10.111 netmask 255.255.255.255
broadcast 192.168.10.111 up

then as I am using a 2.4.26 kernel, I used
arp_announce and arp_ignore to solve the arp
problem with the following commands:

echo '2' > /proc/sys/net/ipv4/conf/all/arp_announce
echo '2' > /proc/sys/net/ipv4/conf/tunl0/arp_announce
echo '1' > /proc/sys/net/ipv4/conf/all/arp_ignore
echo '1' > /proc/sys/net/ipv4/conf/tunl0/arp_ignore

Then finally, on the real server's I turned off apache
and ran netcat on port 80:
"nc -v -v -l -p 80"


Now, according to documentation, everything I have
done should work.  However from an
external machine, (192.168.10.15), if I attempt to
connect to 192.168.10.111:80 (VIP),
my connection just hangs there and eventually times
out.   Did I miss something in the configuration?
Or maybe I did something wrong?   Any help would be
greatly appreciated.

Thanks in advance,

-R.D.


                
__________________________________ 
Do you Yahoo!? 
Take Yahoo! Mail with you! Get it on your mobile phone. 
http://mobile.yahoo.com/maildemo 

<Prev in Thread] Current Thread [Next in Thread>