|
Hi all,
It's been several years since I've set up an LVS cluster and I'm
wondering if things like the infamous "arp problem" still exist? For
instance, using RHELv5 (and piranha) do I still need this in the
iptables on the director (for direct routing):
*mangle
:PREROUTING ACCEPT [407:41667]
:INPUT ACCEPT [407:41667]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [278:22960]
:POSTROUTING ACCEPT [280:23232]
-A PREROUTING -d 131.225.107.124/32 -p tcp -m tcp --dport 3306 -j MARK
--set-mark 3306
COMMIT
And this on the real server:
# horm's tranparent proxy for LVS
*nat
:PREROUTING ACCEPT [7:786]
:POSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
# The following IP must for the floating IP address from the LVS
# director
-A PREROUTING -d 131.225.107.124 -j REDIRECT
COMMIT
I just realized that this is *not* a RHELv5 kernel. It's 2.6.18 from
xensource. Not sure if that makes any difference...
Thanks in advance,
Dan
--
Dan Yocum
Fermilab 630.840.6509
yocum@xxxxxxxx, http://fermigrid.fnal.gov
Fermilab. Just zeros and ones.
|
