[lvs-users] Keepalived problem with load balancing

[Sharif Uddin <sharif@xxxxxxxxxx>]

I have set up keepalived for load balancing. It works for redundancy but 
does not work when trying to load balance.

I am using mnultiple servers and have exact same configurations on both 
servers. debian 64 bit squeeze.

keepaliv conf:

[CODE]
# Configuration File for Keepalived

# Global Configuration
global_defs {
   notification_email {
     sharif@xxxxxxxx
   }
   notification_email_from keepalived@xxxxxxxx
   smtp_server smtp.xxxx.lan
   smtp_connect_timeout 30
   router_id DEBIAN2        # string identifying the machine
}

# describe virtual service ip
vrrp_instance VI_1 {
   # initial state
   state BACKUP
   interface eth0
   # arbitary unique number 0..255
   # used to differentiate multiple instances of vrrpd
   virtual_router_id 1
   # for electing MASTER, highest priority wins.
   # to be MASTER, make 50 more than other machines.
   priority 60
   authentication {
     auth_type PASS
     auth_pass xxx
   }

   virtual_ipaddress {
     192.168.0.199/32
   }

   smtp_alert
}

# describe virtual web server
virtual_server 192.168.0.199 8080 {
#  delay_loop 5

   # lc = least connected
   lb_algo rr

   # DR = Dynamic routing (best)
   lb_kind NAT

#  persistence_timeout 50
   protocol TCP

   real_server 192.168.0.212 80 {
     TCP_CHECK {
       connect_timeout 1
#      nb_get_retry 2
#      delay_before_retry 60
     }
   }
   real_server 192.168.0.213 80 {
     TCP_CHECK {
       connect_timeout 1
#      nb_get_retry 2
#      delay_before_retry 60
     }
   }
}


[/CODE]





The servers are debain2 and debain3.

Now if debian3 is master i can netcat into port 8080 to debian2 but it 
won't work for debian3 locally using rr algorithm. same would happen if 
debian2 was master and debian3 backup. however i can ping the VIP from 
any local pc.



[CODE]
rootdebian3:/etc/keepalived# ipvsadm -l -n --stats
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port               Conns   InPkts  OutPkts  InBytes 
OutBytes
   -> RemoteAddress:Port
TCP  192.168.0.199:8080                  8       21       10     
1205      572
   -> 192.168.0.212:80                    4       17       10      
965      572
   -> 192.168.0.213:80                    4        4        0      
240        0

[/CODE]

In the above debian3 is master and debian 2 is backup. nothing is sent 
back when it tries itself



[CODE]

rootdebian3:/etc/keepalived# ipvsadm -ln
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
   -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
TCP  192.168.0.199:8080 rr
   -> 192.168.0.212:80             Masq    1      0          0
   -> 192.168.0.213:80             Local   1      0          0



2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
state UP qlen 1000
     link/ether 00:17:31:8f:74:1c brd ff:ff:ff:ff:ff:ff
     inet 192.168.0.213/24 brd 192.168.0.255 scope global eth0
     inet 192.168.0.199/32 scope global eth0
     inet6 fe80::217:31ff:fe8f:741c/64 scope link
        valid_lft forever preferred_lft forever



[/CODE]



I have the following in ''/etc/sysctl.conf''
net.ipv4.ip_forward = 1
net.ipv4.ip_nonlocal_bind = 1
net.ipv4.conf.default.arp_ignore = 1
net.ipv4.conf.default.arp_announce = 2
net.ipv4.conf.default.rp_filter = 0



I have manually tried to add NAT rule onto backup using ''iptables -A 
PREROUTING -t nat -d 192.168.0.199 -p tcp -j REDIRECT'' but that doesn't 
work. I have also tried to change ''lb_kind'' to ''DR'' but that doesn't 
work. I have read many how to guides and have followed exactly same 
procedures and none seem to work.

I have loaded modules using modprobe


 From my understanding keepalived can be used to load balance and have 
for failover.

_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/

LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to http://lists.graemef.net/mailman/listinfo/lvs-users