|
I've attempted to simplify things on this new attempt (fyi, there is no
eth0 on any of the machines):
DIP = 74.52.166.34 bound to eth1
VIP = 74.52.166.35 bound to eth1:35
RS1 = 74.52.166.50 bound to eth1
RS1VIP = 74.52.166.35 bound to lo:35
RS2 = 74.52.166.130 bound to eth1
RS2VIP = 74.52.166.35 bound to lo:35
On Director:
[root@lb1 ~]# sysctl -p
net.ipv4.conf.lo.arp_ignore = 0
net.ipv4.conf.lo.arp_announce = 0
net.ipv4.conf.eth1.arp_ignore = 0
net.ipv4.conf.eth1.arp_announce = 0
net.ipv4.conf.all.send_redirects = 1
net.ipv4.conf.default.send_redirects = 1
net.ipv4.conf.eth1.send_redirects = 1
net.ipv4.ip_forward = 0
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.default.accept_source_route = 0
On both RS's:
net.ipv4.conf.lo.arp_ignore = 1
net.ipv4.conf.lo.arp_announce = 2
net.ipv4.conf.eth1.arp_ignore = 1
net.ipv4.conf.eth1.arp_announce = 2
net.ipv4.ip_forward = 0
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.default.accept_source_route = 0
Care to show the ipvsadm -L -n output?
[root@lb1 ~]# ipvsadm -L -n
IP Virtual Server version 1.2.0 (size=4096)
Prot LocalAddress:Port Scheduler Flags
-> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP 74.52.166.35:23 rr
-> 74.52.166.50:23 Route 1 0 0
-> 74.52.166.130:23 Route 1 0 0
The preferred way of dealing with this is by instrumenting
arp_{announce,ignore} in the proc-fs.
I've cleared out all the arptables stuff and are trying to use the
arp_{announce,ignore} as suggested but I am unsure which interfaces need
what setting. The mini-HOWTO isn't too clear on this.
Can you tcpdump on the director? Are you sure there's not some filtering
of illicit traffic on switch ports on your ISP's side?
Yes. Running "tcpdump -n -i eth1 port 23" on the director shows lots of
these when I try and telnet from my home machine:
11:37:45.031014 IP 70.241.143.240.3165 > 74.52.166.35.telnet: S
2050237163:2050237163(0) win 65535 <mss 1452,nop,nop,sackOK>
Running "tcpdump -n -i any port 23" on the 2 RS's shows nothing when I
try to telnet to the VIP.
Thanks very much for your assistance.
-Matthew
|
