|
I tried using lvs-nat. But i am facing problems with soap Server on
the real servers (obviosly, php soap does not like masquerading) so i
am looking for a solution with only one configured nic on the real
server that has an internal ip. My problem now is how to configure an
outgoing route without using masq on the director.
By the way: everything is working fine with a second nic on the real
server, that has a public ip. I configured iptables to be a little bit
more secure, but in fact i am not feeling very comfortable with this
solution.
Am 07.02.2008 um 16:58 schrieb Aslan Carlos <aslan@xxxxxxxxxxxxxxx>:
> Hi Andreas,
>
> The real servers have 2 NICs, one for Internet access and other for
> intranet access and have more 3 dummy interfaces ( logical
> interfaces )
> with IP of the Virtual Server.
>
> We use the NIC with Internet IP for access the Internet normally as
> common server, they have a gateway is real route not the director.
>
> The difference the real server from the normal server is they have
> this
> 3 dummy interfaces with virtual server's ip and on the postfix in the
> real server don't bind the nic which have directly Internet access.
>
>
> Can you describe your environment, may would I help you..
>
> best regards,
> --
> Aslan Carlos de M. Ramos
> Senior Network Administrator
> Digirati Telecom, K8 Networks, Hostnet Web Hosting
> Phone : +55(21) 2233-5950 Tie-line: 29
> Mobile: +55(21) 7891-2292 / 81*74623
> Skype : aslancarlos
>
>
>
>
>
> On Thu, 2008-02-07 at 14:57 +0100, Andreas Altenburg wrote:
>> Nice, maybe exavtly the patch solving my Problem. How will the real
>> servers in your environment communicate with the Internet? Are you
>> using the director as a gateway? Would be nice, if you will explain
>> your solution a little bit more detailed. Thanks!
>>
>> Am 07.02.2008 um 14:51 schrieb Aslan Carlos <aslan@xxxxxxxxxxxxxxx>:
>>
>>> Hi folks,
>>>
>>> We have a LVS server it's a MTA cluster where is using a dummy
>>> interface for transport VS <-> RS . So our policy is each server
>>> has 2
>>> NICs, one is for internet access and other one is to for internal
>>> network. The realserver didn't bind the external IP, just a
>>> aliases IP
>>> in dummy interface equal the Virtual Server than the ldirectord
>>> think
>>> the realserver is down.
>>>
>>> I made this patch for the ldirectord add the rule in IPVS, but
>>> monitoring another ip, in my case, monitor a internal ip.
>>>
>>> suggestions and bugs is welcome. :)
>>>
>>> --
>>> Aslan Carlos de M. Ramos
>>> Network Administrator
>>> Digirati Telecom, K8 Networks, Hostnet Web Hosting
>>> Phone : +55(21) 2233-5950 Tie-line: 29
>>> Mobile: +55(21) 7891-2292 / 81*74623
>>> <ldirectord_monitor.patch>
>>> _______________________________________________
>>> LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
>>> Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
>>> or go to http://lists.graemef.net/mailman/listinfo/lvs-users
>>
>> _______________________________________________
>> LinuxVirtualServer.org mailing list - lvs-
>> users@xxxxxxxxxxxxxxxxxxxxxx
>> Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
> _______________________________________________
> LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
> Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
> or go to http://lists.graemef.net/mailman/listinfo/lvs-users
|
