On 13/03/2006 06:58, Tony Spencer wrote:
<snip>
My concern is if the LVS service does encounter a fault and dies on the
primary LVS then web requests will still fail since our upstreams router
will still see the MAC address of the primary LVS. And since the last it
knew the VIP was on that MAC address and that MAC address is still reachable
it isn't going to send any requests to the backup LVS.
At failover, make the new live director run something along the lines of:
/sbin/ping -c5 -I $VIP $GW_IP
Where $GW_IP is the IP address of your upstream router. It's not exactly
gratuitous ARP but it does, in my experience, help to rapdily converge
the systems which currently don't talk to each other.
Also make *absolutely* sure that the VIP is being torn down on the
failed director. If it isn't, and it still ARPs for it, you'll end up in
all sorts of problems.
To monitor this you could feasibly run arpwatch on both the directors'
upstream interfaces. You should see the VIP flip-flop on failover. If
you see it repeatedly flip-flop at regular intervals, you're not tearing
down properly.
Graeme
|