LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: port unreachable after RS removal

To: "LinuxVirtualServer.org users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: port unreachable after RS removal
From: Jan Kasprzak <kas@xxxxxxxxxx>
Date: Fri, 25 Mar 2005 18:18:06 +0100
Todd Lyons wrote:
: 
: >     I have one thing to add: It is probably related to using
: >very different weights. On one virtual server I use weights of 100 and 133
: >just to reflect the real servers' CPU power, and this one seems to be OK.
: >On other virtual server I use weigths of 1, 1, 100, and 10000 to make
: >one particular real server to be used all the time, provided that it is
: >alive. On this virtual server I get "connection refused" (port unreachable)
: >when the main real server goes down.
: 
: What exactly do you mean by "keep ldirectord out of the picture"?
: During the time period when the server is unreachable and ldirectord
: hasn't probed for it yet, then yes, you will get unreachable.

        No, I have stopped ldirectord completely, and created
the virtual service by ipvsadm. After ipvsadm -r of one of two
real servers I get the "connection refused" error.

: But it sounds like you're saying:
: 1) I have an active real server, serving packets.
: 2) I turn off real server.
: 3) I remove virtual line from ipvs.
: 4) Then I try to connect and get a connection refused.

        Yes, except that I don't do 2) - I just remove the line
from the virtual server definition.

: How many times does #4 happen?

        It is permanent (at least for 10 minutes - I have not tested
more). I do not use any persistent connections.

:  Does it do it if you test from a
: different machine?

        Yes. It happens even when I do wget from the different machine
(from which there was no prior access to the virtual service).

:  I did notice that if I do a sequence of wgets from
: the same machine, it seems to mostly go to the same real machine.  If I
: pause a bit (a few seconds) or try it from other machines, then it
: alternates between them.

        No. Tcpdump shows that the ipvs host does not send any traffic
to the (failed) real server. It just returns ICMP "tcp port unreachable"
on its own.

-Yenya

-- 
| Jan "Yenya" Kasprzak  <kas at {fi.muni.cz - work | yenya.net - private}> |
| GPG: ID 1024/D3498839      Fingerprint 0D99A7FB206605D7 8B35FCDE05B18A5E |
| http://www.fi.muni.cz/~kas/   Czech Linux Homepage: http://www.linux.cz/ |
> Whatever the Java applications and desktop dances may lead to, Unix will <
> still be pushing the packets around for a quite a while.      --Rob Pike <

<Prev in Thread] Current Thread [Next in Thread>