Hello,
I'm trying to figure out a problem I'm having with my LVS-NAT setup.
It's a very simple setup, one director, two networks (director has two
nics, one on lan one on internet), three webservers on LAN only on port
80. The issue I'm having is occasionally and randomly the director will
apparently just sever the connection when trying to download a file from
the webserver. I have performed these tests just fine without issue:
1) Downloading a file directly from the director to a client
2) Downloading a file from the webserver to the director
So it would appear that the physical connection is OK, I can make
connections to the individual machines without problem, just when
connecting through the director to the webserver.
What happens is I will be downloading a file, and it will hang (at
random points during the download, sometimes not at all), and not continue.
ipvsadm will show "ESTABLISHED" on that connection for quite a long
time, then "ERR!" after it times out I believe.
Watching the traffic on a packet-sniffer client-side shows that directly
before the failure, my client keeps sending the same "ack" message back
to the server over and over, and the server appears to not recognize it.
It must be related, but it makes me question where the problem is: the
exact same sort of problem happens when I set up IPTABLES to forward a
port on the director to one of the webservers directly. I'm not sure if
I'm barking up the wrong tree asking on this mailing list, but hopefully
somebody has run into something similar before, or can at least point me
in the right direction :)
Here is the config of my machines:
CentOS 5
latest kernel 2.6.18-8.1.8.el5
ipvsadm v1.24
IPVS v1.2.0
I'm not doing anything "fancy" with the webserver, just downloading a
large file for test, from apache. Like I said, the webservers work fine
when accessing not through the director.
If there's anything I have missed, I apologize. Please let me know
anything else that I should provide for information.
Thanks in advance,
-Jesse
|