|
Hello,
I was writting this mail to explain my problem and i found it in the
same time. I send it, maybe it will helps someone. In fact the iprules
have to have as ip source address the VIP and not the realserver
adress :
ip rule add from 10.0.22.171 table ftp_table
ip rule add from 10.0.23.100 table http_table
No problem anymore, resolved problem explained below
---
I have installed and configured keepalived (v1.1.13).
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
-> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP 10.0.23.100:http wlc persistent 600
-> 192.168.15.11:http Masq 100 0 0
TCP 10.0.22.171:ftp wlc persistent 600
-> 192.168.15.10:ftp Masq 100 0 0
I'm trying to manage different services on different VLANs on my loadbalancer.
eth0.26 : vlan 10.0.22.0/24 for ftp
eth0.28 : vlan 10.0.23.0/24 for http
The problem is I can configure only one default route on my
loadbalancer. For example, if my default route is 10.0.23.1, request
and reply for http (vlan 10.0.23.0) both going in the good vlan. But
for ftp, request will be on the good vlan (10.0.22.0) but reply on
vlan 10.0.23.0 (my firewall authorizes that for tests) and not
10.0.22.0.
I have tried to define some iprules on my loadbalancer to say if the
source ip address is 192.168.15.10, so forward packets to 10.0.22.0
network but it seems doesn't work. LVS apparently don't let the
routing decisions to the operating system after its own operations...
Here are my iprules :
ip rule add from 192.168.15.10 table ftp_table
ip rule add from 192.168.15.11 table http_table
ip route add default via 10.0.22.1 dev eth0.26 table ftp_table
ip route add default via 10.0.23.1 dev eth0.28 table http_table
ip route flush cache
I also tried that but no more effect :
ip route add default scope global nexthop via 10.0.22.1 dev eth0.26
weight 1 nexthop via 10.0.23.1 dev eth0.28 weight 1
Thanks,
François
(and sorry for my english)
----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
|
