LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: [lvs-users] tftp service and firewall mark

To: "LinuxVirtualServer.org users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: [lvs-users] tftp service and firewall mark
From: Hannes Eder <heder@xxxxxxxxxx>
Date: Mon, 28 Sep 2009 13:23:17 +0200
On Mon, Sep 28, 2009 at 13:02, Simon Horman <horms@xxxxxxxxxxxx> wrote:
> On Mon, Sep 28, 2009 at 12:10:10PM +0200, Nicolas Haller wrote:
>> Hi all,
>>
>> I try to loadbalance a tftp service. For this, I try to add some mangle
>> rules.
>>
>> The conf from ipvsadm is:
>> FWM  1 wlc persistent 120
>>   -> braille.nerim.net:69         Tunnel  1      0          0
>>   -> morse.nerim.net:69           Tunnel  0      0          0
>>
>> and iptables is empty but have these two lines:
>> Chain PREROUTING (policy ACCEPT 217M packets, 64G bytes)
>>  pkts bytes target     prot opt in     out     source               
>> destination
>>    30  1470 MARK       udp  --  eth0   any     anywhere             
>> lo-nc.nerim.net     udp dpt:tftp MARK xset 0x1/0xffffffff
>>     0     0 MARK       udp  --  eth0   any     anywhere             
>> lo-nc.nerim.net     udp dpts:1024:65535 MARK xset 0x1/0xffffffff
>>
>> So, when I test, lvs said:
>>
>> Sep 28 11:55:05 balancoire-1v kernel: [1121193.129497] IPVS: lookup/in UDP 
>> 213.251.170.39:52249->194.79.128.129:69 not hit
>> Sep 28 11:55:05 balancoire-1v kernel: [1121193.129514] IPVS: lookup/out UDP 
>> 213.251.170.39:52249->194.79.128.129:69 not hit
>> Sep 28 11:55:05 balancoire-1v kernel: [1121193.129529] IPVS: lookup service: 
>> fwm 1 UDP 194.79.128.129:69 hit
>> Sep 28 11:55:05 balancoire-1v kernel: [1121193.129545] IPVS: p-schedule: src 
>> 213.251.170.39:52249 dest 194.79.128.129:69 mnet 213.251.170.39
>> Sep 28 11:55:05 balancoire-1v kernel: [1121193.129561] IPVS: template 
>> lookup/in IP 213.251.170.39:0->0.0.0.1:0 not hit
>>
>> So, lvs see the mark and the packet but it don't send the packet into ip-ip
>> tunnel and the director send an ICMP udp port unreachable back to the client.
>>
>> Someone can help me?
>
> Try inserting the ip_vs_ftp kernel module.

I am pretty sure that the ip_vs_ftp module will not help with _t_ftp.

-Hannes

_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to http://lists.graemef.net/mailman/listinfo/lvs-users

<Prev in Thread] Current Thread [Next in Thread>