LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: LVS-Tun on pfsense ( freebsd )

To: lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Subject: Re: LVS-Tun on pfsense ( freebsd )
Cc: maluyao@xxxxxxx
From: "Arief Setiawan" <aleifuu@xxxxxxxxx>
Date: Wed, 4 Apr 2007 12:11:36 +1000
Hi,

@maluyao : I didn't realize you wrote this document previously XD. I've read
it before but I just didn't realize.
                  it's the closest thing that fits my situation right now.
http://linux.chinaunix.net/bbs/attachment.php?aid=155735

The bad news is .. I haven't been able to get it working =(
The slightly good news is .. yes I can create the gif0 device and config it.


I wonder if you can help me more.

here's my setting :
VIP 192.168.2.70    ( Linux BOX )
DIP 192.168.2.73    ( Linux BOX )
RIP 192.168.0.10    ( FreeBSD BOX loaded with pfsense. but basically it's a
FreeBSD BOX )

This is what I've done on FreeBSD box ( RealServer )
# ifconfig gif0 tunnel 192.168.0.10 192.168.2.70
                           ( RIP -> DIP )
# ifconfig gif0 inet 192.168.2.73 192.168.2.72 netmask 255.255.255.0
( VIP -> ANY ? )
  note :  In the doco,  you mentioned the other end could be any idle IP
and never use. In this case,
            192.168.2.72 is idle IP on 192.168.2.0/24 network
# ifconfig gif0 up
# ifconfig gif0
gif0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1280
       tunnel inet 192.168.0.10 --> 192.168.2.70
       inet6 fe80::20c:29ff:fe81:1212%gif0 prefixlen 64 scopeid 0x8
       inet 192.168.2.73 --> 192.168.2.72 netmask 0xffffff00


ldirectord is setup on Linux box ( Director )
ipvsadm -L -n shows :
Prot LocalAddress:Port Scheduler Flags
 -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
TCP  192.168.2.73:80 rr
 -> 192.168.0.10:80              Tunnel  0      0          0


For a test, I should be able to see a test page when I type
http://192.168.2.73:80 in my browser. but it's not showing anything.

traceroute -i gif0 on FreeBSD Box doesn't really output anything.

ipvsadm -Lc on Linux BOX gives :
IPVS connection entries
pro expire state       source             virtual            destination
SYNC_RCV    192.168.0.21  192.168.2.73 192.168.0.10:80
0.21 is a client's machine for example

and not ESTABLISHED as it should.

Totally clueless on this one as for now. Something might be wrong with the
way I set this one up ?

Many thanks.

<Prev in Thread] Current Thread [Next in Thread>