On Wed, 22 Oct 2008, Sebastien COUPPEY wrote:
> We can see that packets arrive back on the director, are correctly
> rewritten and sent back to the client 10.44.0.254. However the client
> never receive the packet.
I didn't look at the dump, but will take your interpretation
of it. Is it possible for you to have problems with the
reduced MTU of the ipsec packets. Can you fetch a small web
page from the realserver, or run a service with small
packets, eg telnet? If you haven't handled that already,
lookup the sections in the HOWTO that have MTU in the
section heading.
> I was wondering if the "brownfield" patch
don't know (but you only have one NIC?)
> or NFCT patch
don't think so
> described in the LVS-HOWTO.LVS-NAT.html documentation was
> included in the 2.6.18 kernel. ipvsadm v1.24 2003/06/07
> (compiled with getopt_long and IPVS v1.2.0)
Joe
--
Joseph Mack NA3T EME(B,D), FM05lw North Carolina
jmack (at) wm7d (dot) net - azimuthal equidistant map
generator at http://www.wm7d.net/azproj.shtml
Homepage http://www.austintek.com/ It's GNU/Linux!
|