Re: [lvs-users] ipvs, keepalived, squid don't work together

To: Igor Velichkevich <igor.velichkevich@xxxxxxxxx>
Subject: Re: [lvs-users] ipvs, keepalived, squid don't work together
Cc: lvs-users@xxxxxxxxxxxxxxxxxxxxxx
From: Simon Horman <horms@xxxxxxxxxxxx>
Date: Tue, 16 Feb 2010 16:48:46 +1100
On Sun, Feb 14, 2010 at 04:27:50PM +0200, Igor Velichkevich wrote:
> Hello, Lvs-users.
> For balancing two ISP to local network I use keepalived, ipvs, squid and
> patch 
> I adopted it for kernel 2.6.31 (may be not right).
> All settings below.
> Local hosts use as default gateway.
> But Internet works only via


I'm not sure that I understand your setup correctly, but I think
that what you are trying to do is transparently proxy port 80
to the local port 3128 which in turn is load balanced.

Is that correct?

If so, I suspect that the problem is that netfilter is actuing
on the PREROUTING chain but that is too late for LVS, which
effectively hangs off the INPUT chain.

I have two suggestions:

1) Use a fwmark virtual service that covers all port 80 connections or;

2) Move LVS to the PREROUTING chain

Please read the documentation before posting - it's available at: mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to

<Prev in Thread] Current Thread [Next in Thread>