I have my mailservers setup as realservers in my LVS-DR network. It
works well with the exception that after some amount of time (a few
hours usually) the remote clients begin getting messages that they are
unable to connect to mail.domain or smtp.domain (these resolve to the
VIP of LVS-DR). When I try and telnet to the mail ports from these
remote mail clients I see one of two things:
connection refused
no route to host
These clients are internal and on the same subnet so I try telnetting
directly to the mailservers and all accesses work just fine coming in
direct like that.
So I tried restarting keepalived. This managed to clear the access for
port 25 and port 110 but not for port 143. Port 143 still won't
connect. Nothing else seems to help until I reboot both director boxes
and then and only then can the client regain access to port 143 for a
few hours until the problem starts again.
I looked through the howto's and the only thing I found that seems
somewhat related is the discussion in section 28.14 Long sessions
through LVS DR director terminated by icmp-host-prohibited (ICMP type 3
code 10). I don't know if I've bumped into this but I cannot figure out
anything else that might be the cause.
Gerry
|