|
On Thu, 15 Nov 2007, John Little wrote:
> Sorry about the ascii are. I wasn't sure how that would turn out.
ascii art just has to have no tabs and be limited to about
60 chars wide to make it through e-mail
> Medical server ip: 128.1.6.3
> LVS RIP: 128.1.247.72 eth0
is this what we call the DIP?
> LVS VIP: 128.1.247.167 eth0:1
> Real Srv RIP (Tomcat): 128.1.247.51 eth0
> Real Srv VIP (Tomcat): 128.1.247.167 lo0:67
>
> Netmask is 255.255.0.0. except on lo:67 which is 255.255.255.255
>
> Routing table:
> Kernel IP routing table
> Destination Gateway Genmask Flags Metric Ref Use Iface
> 128.1.247.167 * 255.255.255.255 UH 0 0 0 lo
> 128.1.0.0 * 255.255.0.0 U 0 0 0 eth0
> link-local * 255.255.0.0 U 0 0 0 eth0
> loopback * 255.0.0.0 U 0 0 0 lo
> default 128.1.7.7 0.0.0.0 UG 0 0 0 eth0
>
> The setup is:
>
> Medical info. server -> LVS -> Real Server (Tomcat) -> end user server
> netstat output from the real server:
> tcp 1 0 ieng-repo-dev.hrh.:8325 128.1.247.72%720:54364
> CLOSE_WAIT 11968/is_domain2
> tcp 1 0 ieng-repo-dev.hrh.:8325 128.1.247.72%720:54356
> CLOSE_WAIT 11968/is_domain2
> tcp 1 0 ieng-repo-dev.hrh.:8325 128.1.247.72%720:54348
> CLOSE_WAIT 11968/is_domain2
> =>snip
> As you can see from the above the tomcat server is
> connecting back to the RIP on the LVS router and going
> into a CLOSE_WAIT state.
I assume ieng-repo-dev.hrh is a realserver.
I have no idea why an application on the realserver is
connecting to the DIP. It's not part of the connection
that you've established from the client to the VIP on the
realserver.
Either something is misconfigured (LVS? application?) (most
likely) or the application is making assumptions about the
connection to the client which is invalid (less likely).
>> Make sure the application is not listening/running/attached
>> to the RIP (at least for testing that your LVS works).
>
> It isn't.
on the realserver do you see a connection from the client to
the VIP?
>> You can check your routing by running telnet as your LVS'ed
>> service to see if this behaves.
> This works ok.
you get load balancing and on the realserver you see a
connection to the VIP?
Joe
--
Joseph Mack NA3T EME(B,D), FM05lw North Carolina
jmack (at) wm7d (dot) net - azimuthal equidistant map
generator at http://www.wm7d.net/azproj.shtml
Homepage http://www.austintek.com/ It's GNU/Linux!
|
