RH and arp - why not just hack ifup?

Kjetil Torgrim Homme kjetilho at ifi.uio.no
Sun Jul 11 03:19:29 BST 2004


On ons, 2004-07-07 at 11:50 +0800, Christopher DeMarco wrote:
> Hi all... regarding the 04MAY2004 thread about RHEL AS realservers and
> howto keep arping from horking the LVS...
> 
> Why not   just comment out the  bits  of ifup that  invoke  arp(8) and
> arping(8)?  It's not ideal insofar as any system upgrades will need to
> re-clean the  ifup  code, but  to  my  mind it's the   least  invasive
> procedure  - re-writing clean init  scripts  will break the entire  RH
> point-n-drool  configurization functionality  that  users  may want to
> use.

why not use arptables?  it's a supported package and does the job.  (I
did make a fool of myself and blocked only incoming requests, so I got
bitten by the gratuitous ARP from ifup myself, but I deserved that.)

the package name is arptables_jf for some reason.

> My understanding is that the manipulation  of arp caches is the single
> impediment to using RH products with LVS, or are there others?

are there any?

-- 
Kjetil T.



More information about the lvs-users mailing list