LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: IP Update - maybe an arp issue

To: "LinuxVirtualServer.org users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: IP Update - maybe an arp issue
From: Graeme Fowler <graeme@xxxxxxxxxxx>
Date: Mon, 13 Mar 2006 09:25:01 +0000
On 13/03/2006 06:58, Tony Spencer wrote:
<snip>
My concern is if the LVS service does encounter a fault and dies on the
primary LVS then web requests will still fail since our upstreams router
will still see the MAC address of the primary LVS. And since the last it
knew the VIP was on that MAC address and that MAC address is still reachable
it isn't going to send any requests to the backup LVS.

At failover, make the new live director run something along the lines of:

/sbin/ping -c5 -I $VIP $GW_IP

Where $GW_IP is the IP address of your upstream router. It's not exactly gratuitous ARP but it does, in my experience, help to rapdily converge the systems which currently don't talk to each other.

Also make *absolutely* sure that the VIP is being torn down on the failed director. If it isn't, and it still ARPs for it, you'll end up in all sorts of problems.

To monitor this you could feasibly run arpwatch on both the directors' upstream interfaces. You should see the VIP flip-flop on failover. If you see it repeatedly flip-flop at regular intervals, you're not tearing down properly.

Graeme

<Prev in Thread] Current Thread [Next in Thread>