hold at SYN_RECV / LVS-Tun over Internet / one InActConn

["M.Rautenberg" <m.rautenberg@xxxxxxxxx>]

hello group, sorry but im very confused...
i config LVS for 7 days... not working


at RS i create a tunl0 interface (ips are examples):
<ip tunnel add tunl0 mode ipip
<ifconfig tunl0 111.112.239.21 netmask 255.255.255.255 broadcast
111.112.239.21 up <route add -host 111.112.239.21 dev tunl0

but i only get SYN_RECV and nothing happens

whats wrong?

outputs:
----------------------------------------------------------
REALSERVER:

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use
Iface
111.112.239.21  0.0.0.0         255.255.255.255 UH    0      0        0
tunl0


tunl0     Link encap:IPIP Tunnel  HWaddr
          inet addr:111.112.239.21  Mask:255.255.255.255
          UP RUNNING NOARP  MTU:1480  Metric:1
          RX packets:71 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:78 dropped:0 overruns:0 carrier:0
          collisions:78 txqueuelen:0
          RX bytes:3528 (3.4 Kb)  TX bytes:0 (0.0 b)

#netstat says (this show me the director deliver to RS):
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State
tcp        0      0 111.112.239.21:80       80.80.80.80:35611     SYN_RECV
----------------------------------------------------------
DIRECTOR:



eth0:1    Link encap:Ethernet  HWaddr 00:E0:4C:CC:CE:FD
          inet addr:111.112.239.21  Bcast:111.112.239.63
Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          Interrupt:19 Base address:0x7000


IP Virtual Server version 1.2.0 (size=4096) Prot LocalAddress:Port Scheduler
Flags
  -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
TCP  111.112.239.21:80 wrr
  -> 100.110.232.80:80             Tunnel  1      0          1


IPVS connection entries
pro expire state       source             virtual            destination
TCP 00:54  SYN_RECV    80.80.80.80:35611 111.112.239.21:80
100.110.232.80:80

-------------------------------------------------------------------------

                         ________
                       |             |
                       | client     | 
                       |________|
                       CIP=80.80.80.80
                           |
                           |
                      INTERNET
                           |
                           |
                      VIP=111.112.239.21 (eth0:1, arps)
                       __________
                      |          |
                      | director |
                      |__________|
                      DIP=111.112.238.86 (eth0)
                           |
                           |
          --INTERNET--
          |               
          |               
   RIP1=100.110.232.80  
    _____________   
   |                     |         
   | realserver       |    
   |_____________|  

   VIP=111.112.239.21  (all tunl0,non-arping)
          |               
      (router)          
          |            
          ----------------------------------------------> to client