LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

problem with LVS-DR

To: <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: problem with LVS-DR
From: "Timothy Bushart" <tbushart@xxxxxxxxxxxx>
Date: Fri, 9 Dec 2005 23:33:15 -0500
hello

I'm having an issue setting up LVS-DR--->Squid

4 Nodes of RHEL 4

kernel-2.6.9-22.EL

2 LVS Load Balancers -> 2 Squid Real Servers

on my primary and secondary directors using piranha:

in sysctl.conf

net.ipv4.ip_forward = 1

lvs.cf:

serial_no = 33
primary = x.x.166.133
service = lvs
backup_active = 1
backup = x.x.166.132
heartbeat = 1
heartbeat_port = 539
keepalive = 6
deadtime = 18
network = direct
debug_level = NONE
monitor_links = 0
virtual Squid {
     active = 1
     address = x.x.166.181 eth0:1
     vip_nmask = 255.255.255.0
     port = 3128
     persistent = 86400
     send = "GET / HTTP/1.0rnrn"
     expect = "HTTP"
     use_regex = 0
     load_monitor = none
     scheduler = wlc
     protocol = tcp
     timeout = 6
     reentry = 15
     quiesce_server = 1
     server squid1 {
         address = x.x.166.179
         active = 1
         weight = 1
     }
     server squid2 {
         address = x.x.166.180
         active = 1
         weight = 1
     }
}

ipvsadm output: (I'm not getting any Route, ActiveConn or InactConn, not
even 0 for some reason)


CURRENT LVS ROUTING TABLE
IP Virtual Server version 1.2.0 (size=4096)
Prot LocalAddress:Port Scheduler Flags
-> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP x.x.166.181:3128 wlc persistent 86400000 FFFFFFFF



(looks like my LVS nodes can't talk to my real servers?)


on my two squid real servers:

installed the arptables_jf service

issued the following commands:

arptables -A IN -d <virtual_ip> -j DROP
arptables -A OUT -d <virtual_ip> -j mangle --mangle-ip-s <real_ip>

service arptables_jf save
chkconfig --level 2345 arptables_jf on

in rc.local:

ifconfig eth0:1 <virtual_ip> netmask 255.255.255.0 broadcast x.x.255.255 up



My primary lvs node is barking in /var/log/messages about timing out to my
real servers, although they are up as I can go directly to them bypassing
lvs and I get connections. I can ping my VIP, I'm not sure what else to
check.

Thanks in advance for any help.


<Prev in Thread] Current Thread [Next in Thread>