|
On Wed, Sep 16, 2009 at 05:11:10PM +0200, Nicolas Haller wrote:
> On Wed, Sep 16, 2009 at 03:46:08PM +0100, Malcolm Turnbull wrote:
> > Nicolas,
> > Not sure but don't you need to remove the first clashing entry?
> > TCP lo-pp.nerim.net:www wlc persistent 120
> > -> harrisburg.nerim.net:www Tunnel 1 0 0
> > -> sellafield.nerim.net:www Tunnel 1 0 0
> > i.e. they both match the same dest ip?
> Yes it's the same dest ip. I've tried to keep only the FWM rule but
> there is no effect.
Ok, I confirm netfilter put marks on packets. It's seems IPVS don't care
about marks.
Here some logs:
Sep 16 18:38:58 balancoire-1j kernel: [ 1886.901835] IN=eth0 OUT=
MAC=00:30:48:5a:4e:4e:00:1f:9d:9f:89:42:08:00 SRC=62.4.16.150
DST=194.79.128.128 LEN=64 TOS=0x00 PREC=0x00 TTL=63 ID=52649 DF
PROTO=TCP SPT=52072 DPT=21 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x1
Sep 16 18:38:58 balancoire-1j kernel: [ 1886.902074] IPVS: lookup/in TCP
62.4.16.150:52072->194.79.128.128:21 not hit
Sep 16 18:38:58 balancoire-1j kernel: [ 1886.902078] IPVS: lookup/out
TCP 62.4.16.150:52072->194.79.128.128:21 not hit
Sep 16 18:38:58 balancoire-1j kernel: [ 1886.902086] IPVS: p-schedule:
src 62.4.16.150:52072 dest 194.79.128.128:21 mnet 62.4.16.150
Sep 16 18:38:58 balancoire-1j kernel: [ 1886.902091] IPVS: template
lookup/in IP 62.4.16.150:0->0.0.0.1:0 not hit
--
Nicolas Haller
_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/
LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to http://lists.graemef.net/mailman/listinfo/lvs-users
|
