LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: Lvs and Trans-Proxy

To: lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Subject: Re: Lvs and Trans-Proxy
From: Bikrant Neupane <bikrant@xxxxxxxxxxxx>
Date: Thu, 23 Jun 2005 14:54:47 +0545
On Thursday 23 June 2005 14:22, Malcolm Turnbull wrote:
> Bikrant Neupane wrote:
> > "The reply packet can get to the Client but it doesn't work since the
> > client is getting reply from different server than the one to which it
> > sent its request"
>
> Wouldn't DR mode solve this ? as the proxy will reply directly to the
> client as expected ?


No it didn't.


client IP: 202.79.63.254 
Director IP: 202.79.63.240  : 192.168.10.1
real server ip:  202.79.63.241 : 192.168.10.10

Cisco router gateway:  202.79.63.230

When from client i did telnet yahoo.com 80

Here is the tcpdump output:
tcpdump in client:

202.79.63.254.32861 > 216.109.112.135.80: S 1951577524:1951577524(0) win 5840 
<mss 1460,sackOK,timestamp 6236407 0,nop,wscale 0> (DF) [tos 0x10]
202.79.63.240.80 > 202.79.63.254.32861: S 3244054575:3244054575(0) ack 
1951577525 win 57344 <mss 1460,nop,wscale 0,nop,nop,timestamp 639778 6236407> 
(DF)
202.79.63.254.32861 > 202.79.63.240.80: R 1951577525:1951577525(0) win 0 (DF)

As you can see here. The realserver is replying back to client using the 
Director ip (202.79.63.240) but with correct ACK. However the client has 
initially sent request to 216.109.112.135 so it is sending Reset back to the 
202.79.63.240 upon receiving the ACK.

I have observed that Cisco routers, alteon L4 switches change only the 
destination MAC when redirecting traffic. The original destination traffic 
remains unchanged. However in case of the LVS the destination IP is changed. 
Am I looking at wrong application?


Thanks again
Bikrant






<Prev in Thread] Current Thread [Next in Thread>