Hi all,
I try to loadbalance a tftp service. For this, I try to add some mangle
rules.
The conf from ipvsadm is:
FWM 1 wlc persistent 120
-> braille.nerim.net:69 Tunnel 1 0 0
-> morse.nerim.net:69 Tunnel 0 0 0
and iptables is empty but have these two lines:
Chain PREROUTING (policy ACCEPT 217M packets, 64G bytes)
pkts bytes target prot opt in out source destination
30 1470 MARK udp -- eth0 any anywhere
lo-nc.nerim.net udp dpt:tftp MARK xset 0x1/0xffffffff
0 0 MARK udp -- eth0 any anywhere
lo-nc.nerim.net udp dpts:1024:65535 MARK xset 0x1/0xffffffff
So, when I test, lvs said:
Sep 28 11:55:05 balancoire-1v kernel: [1121193.129497] IPVS: lookup/in UDP
213.251.170.39:52249->194.79.128.129:69 not hit
Sep 28 11:55:05 balancoire-1v kernel: [1121193.129514] IPVS: lookup/out UDP
213.251.170.39:52249->194.79.128.129:69 not hit
Sep 28 11:55:05 balancoire-1v kernel: [1121193.129529] IPVS: lookup service:
fwm 1 UDP 194.79.128.129:69 hit
Sep 28 11:55:05 balancoire-1v kernel: [1121193.129545] IPVS: p-schedule: src
213.251.170.39:52249 dest 194.79.128.129:69 mnet 213.251.170.39
Sep 28 11:55:05 balancoire-1v kernel: [1121193.129561] IPVS: template lookup/in
IP 213.251.170.39:0->0.0.0.1:0 not hit
So, lvs see the mark and the packet but it don't send the packet into ip-ip
tunnel and the director send an ICMP udp port unreachable back to the client.
Someone can help me?
Regards,
--
Nicolas Haller
_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/
LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to http://lists.graemef.net/mailman/listinfo/lvs-users
|