LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

[lvs-users] tftp service and firewall mark

To: lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Subject: [lvs-users] tftp service and firewall mark
From: Nicolas Haller <nicolas.haller@xxxxxxxxxxxxx>
Date: Mon, 28 Sep 2009 12:10:10 +0200
Hi all,

I try to loadbalance a tftp service. For this, I try to add some mangle
rules.

The conf from ipvsadm is:
FWM  1 wlc persistent 120
  -> braille.nerim.net:69         Tunnel  1      0          0         
  -> morse.nerim.net:69           Tunnel  0      0          0         

and iptables is empty but have these two lines:
Chain PREROUTING (policy ACCEPT 217M packets, 64G bytes)
 pkts bytes target     prot opt in     out     source               destination 
        
   30  1470 MARK       udp  --  eth0   any     anywhere             
lo-nc.nerim.net     udp dpt:tftp MARK xset 0x1/0xffffffff 
    0     0 MARK       udp  --  eth0   any     anywhere             
lo-nc.nerim.net     udp dpts:1024:65535 MARK xset 0x1/0xffffffff 

So, when I test, lvs said:

Sep 28 11:55:05 balancoire-1v kernel: [1121193.129497] IPVS: lookup/in UDP 
213.251.170.39:52249->194.79.128.129:69 not hit
Sep 28 11:55:05 balancoire-1v kernel: [1121193.129514] IPVS: lookup/out UDP 
213.251.170.39:52249->194.79.128.129:69 not hit
Sep 28 11:55:05 balancoire-1v kernel: [1121193.129529] IPVS: lookup service: 
fwm 1 UDP 194.79.128.129:69 hit
Sep 28 11:55:05 balancoire-1v kernel: [1121193.129545] IPVS: p-schedule: src 
213.251.170.39:52249 dest 194.79.128.129:69 mnet 213.251.170.39
Sep 28 11:55:05 balancoire-1v kernel: [1121193.129561] IPVS: template lookup/in 
IP 213.251.170.39:0->0.0.0.1:0 not hit

So, lvs see the mark and the packet but it don't send the packet into ip-ip
tunnel and the director send an ICMP udp port unreachable back to the client.

Someone can help me?

Regards,

-- 
Nicolas Haller

_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

<Prev in Thread] Current Thread [Next in Thread>