Re: [lvs-users] DR : real server unable to reach VIP

To: ms@xxxxxxx, " users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: [lvs-users] DR : real server unable to reach VIP
From: Florent B <florent@xxxxxxxxxxx>
Date: Wed, 20 May 2015 12:59:33 +0200
Thank you a lot for your answer.

On 05/20/2015 12:21 PM, Michael Schwartzkopff wrote:
> Am Mittwoch, 20. Mai 2015, 12:00:01 schrieb Florent B:
>> Some precisions :
>> In fact packets are computed by LVS, the problem is that RS receives a
>> packets with :
>> - its proper eth0 IP in src, but with mac address of LVS server
> "its": which IP in the source field? The source IP address should
always be the
> IP address of the client. The source address should never be the IP
adress of
> the real server.
> MAC address of the director: That is corret.

The source IP address is the IP address of the client, but the client
here is my real server. It tries to connect to VIP.

>> I think packet is filtered somewhere in kernel, but I can't find which
>> setting to change.
> If I understand correct, the source address in the packet that the
real server
> gets is the IP address of the real server. Of course this is an error.
If the
> kernel recieves a packet with a soure with its own IP address it
discards it.

I think that is my problem. How can I do to handle that ?
I know about accept_local parameter, but if I set it to true, I also
need to set rp_filter!=0 and my packet will also be filtered because of
wrong source hardware address (hardware address of director and local IP

> What does change the source IP address of the packet? Do you have
> NAT configurured on the director?

Nothing like this.

Please read the documentation before posting - it's available at: mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to

<Prev in Thread] Current Thread [Next in Thread>