LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: LVS NAT unidentified problem

To: LVS <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: LVS NAT unidentified problem
From: Neamtu Dan <dlxneamtu@xxxxxxxxx>
Date: Sat, 11 Mar 2006 15:51:03 -0800 (PST)
Thank you Joe for replying to my email. This mailing list is the only way I can 
get some help for my LVS.
 
                | client |
 #              |________|
 #           CIP=eth0 192.168.81.20
 #                  |
 #                  |
 #        VIP=eth1:10 192.168.81.10/24 
 #              __________
 #             |                   
 #             | director      
 #             |__________|
 #        DIP=eth0      192.168.82.10
 #                  |  
 #                  |
 #                  |
 #        -------------------
 #         |                        | 
 #         |                       |
 #     RIP1=eth0         RIP2=eth0
 #    192.168.82.30      192.168.82.40
 
 
 192.168.81.10/32 (usually, I think you can get away with 24 in LVS-NAT - not 
sure anymore).
 
 I have tried /32 but the script doesn't add the gateway for the director(gw = 
clientIP), and I couldn't do it manually ( # route add default gw 192.168.81.20 
netmask 0.0.0.0 metric 1 eth1:10
 SIOCADDRT: Network is unreachable), so there could not be communication 
between the director and the client. But from what I have read in the mini-HOW 
TO NAT works with a /24 mask for the VIP, so I tried that way.
  The director's routing table looks like this:
 
 Kernel IP routing table
 Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
 192.168.81.10   0.0.0.0         255.255.255.255 UH    0      0        0 eth1
 192.168.81.0    0.0.0.0         255.255.255.0   U     0      0        0 eth1
 192.168.82.0    0.0.0.0         255.255.255.0   U     0      0        0 eth0
 0.0.0.0         192.168.81.20   0.0.0.0         UG    1      0        0 eth1
 
 I am able to ping from the realservers to the client, 
 
 it's been a while now, I don't think you're supposed to be able to do that.
 
 did you get any errors from the scripts as they were setting up? I've always 
got a working LVS when the scripts exit without errors.
 
 In the case of a /24 mask for the VIP I can ping real server - client, in the 
case of /32 I cannot,becouse of the routing table, as I have said before.
 Indeed I got errors from the script , but that was because of my 2.6.15 kernel 
(the script was tested only for 2.2.x and 2.4.x). Do you think that is the real 
problem? It's said that the script is expected to work on 2.6.x kernels.
 I have tried with telnet on tge realservers, but I have the same problem: the 
packets from the client go correctly through the director the destination IP is 
changed from VIP to RIP, the server replies (receives SYN, sends 
SYN+ACK,tcpdump used), the packet arrives on eth0 (I use two NICs) on the 
director but it doesn't get to eth1:10, so the client receives nothing.
 HElP!!! I am out of ideas.
 
 
                
---------------------------------
Yahoo! Mail
Bring photos to life! New PhotoMail  makes sharing a breeze. 
__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

<Prev in Thread] Current Thread [Next in Thread>