On Mon, 2007-11-26 at 11:49 +0100, Michael Schwartzkopff wrote:
> TCP Syn, Syn ACK, ACK (3-way handshake) works. So NAT shold work in my
> environment.
You should see the following at the client - CIP is client IP, VIP is
virtual IP, DIP is director IP, RIP is realserver IP:
CIP -> VIP SYN
VIP -> CIP SYN/ACK
CIP -> VIP ACK
then several packets transferring data - the request and the response.
It appears your problem stems from the fact that the client is seeing a
response from the RIP, not the VIP. I'm surmising a bit at this point
because I can't see, nor have you described, your network layout.
The client should normally see *nothing* from the DIP or RIP. If it
does, it's not working properly.
What do you see on the director and the realserver at the same time? Is
the realserver responding directly to the client? Come to that, is the
realserver's default gw set to be the director?
Graeme
|