Thank you Joe for replying to my email. This mailing list is the only way I can
get some help for my LVS.
| client |
# |________|
# CIP=eth0 192.168.81.20
# |
# |
# VIP=eth1:10 192.168.81.10/24
# __________
# |
# | director
# |__________|
# DIP=eth0 192.168.82.10
# |
# |
# |
# -------------------
# | |
# | |
# RIP1=eth0 RIP2=eth0
# 192.168.82.30 192.168.82.40
192.168.81.10/32 (usually, I think you can get away with 24 in LVS-NAT - not
sure anymore).
I have tried /32 but the script doesn't add the gateway for the director(gw =
clientIP), and I couldn't do it manually ( # route add default gw 192.168.81.20
netmask 0.0.0.0 metric 1 eth1:10
SIOCADDRT: Network is unreachable), so there could not be communication
between the director and the client. But from what I have read in the mini-HOW
TO NAT works with a /24 mask for the VIP, so I tried that way.
The director's routing table looks like this:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.81.10 0.0.0.0 255.255.255.255 UH 0 0 0 eth1
192.168.81.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
192.168.82.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
0.0.0.0 192.168.81.20 0.0.0.0 UG 1 0 0 eth1
I am able to ping from the realservers to the client,
it's been a while now, I don't think you're supposed to be able to do that.
did you get any errors from the scripts as they were setting up? I've always
got a working LVS when the scripts exit without errors.
In the case of a /24 mask for the VIP I can ping real server - client, in the
case of /32 I cannot,becouse of the routing table, as I have said before.
Indeed I got errors from the script , but that was because of my 2.6.15 kernel
(the script was tested only for 2.2.x and 2.4.x). Do you think that is the real
problem? It's said that the script is expected to work on 2.6.x kernels.
I have tried with telnet on tge realservers, but I have the same problem: the
packets from the client go correctly through the director the destination IP is
changed from VIP to RIP, the server replies (receives SYN, sends
SYN+ACK,tcpdump used), the packet arrives on eth0 (I use two NICs) on the
director but it doesn't get to eth1:10, so the client receives nothing.
HElP!!! I am out of ideas.
---------------------------------
Yahoo! Mail
Bring photos to life! New PhotoMail makes sharing a breeze.
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
|