Fwd: LVS NAT - Suse OSS 10.0

Wed Nov 22 08:52:02 GMT 2006

Did I mention that 41.240.84.137 was the client addr.

Don't know if this helps. This is a tcpdump on the director.

loadb1:~ # tcpdump -ln host 41.240.84.137
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
10:36:55.969579 IP 41.240.84.137.1828 > 192.168.30.110.80: S
3392940774:3392940774(0) win 65535 <mss 1440,nop,nop,sackOK>
10:36:55.969754 IP 192.168.30.110.80 > 41.240.84.137.1828: S
4099702870:4099702870(0) ack 3392940775 win 5840 <mss
1460,nop,nop,sackOK>
10:36:58.897195 IP 41.240.84.137.1828 > 192.168.30.110.80: S
3392940774:3392940774(0) win 65535 <mss 1440,nop,nop,sackOK>
10:36:58.897341 IP 192.168.30.110.80 > 41.240.84.137.1828: S
4099702870:4099702870(0) ack 3392940775 win 5840 <mss
1460,nop,nop,sackOK>
10:36:59.985599 IP 192.168.30.110.80 > 41.240.84.137.1828: S
4099702870:4099702870(0) ack 3392940775 win 5840 <mss
1460,nop,nop,sackOK>
10:37:04.830009 IP 41.240.84.137.1828 > 192.168.30.110.80: S
3392940774:3392940774(0) win 65535 <mss 1440,nop,nop,sackOK>
10:37:04.830147 IP 192.168.30.110.80 > 41.240.84.137.1828: S
4099702870:4099702870(0) ack 3392940775 win 5840 <mss
1460,nop,nop,sackOK>
10:37:05.986615 IP 192.168.30.110.80 > 41.240.84.137.1828: S
4099702870:4099702870(0) ack 3392940775 win 5840 <mss
1460,nop,nop,sackOK>
10:37:17.988685 IP 192.168.30.110.80 > 41.240.84.137.1828: S
4099702870:4099702870(0) ack 3392940775 win 5840 <mss
1460,nop,nop,sackOK>
10:37:19.989051 IP 192.168.30.110.80 > 41.240.84.137.1823: S
4027966785:4027966785(0) ack 2713409404 win 5840 <mss
1460,nop,nop,sackOK>
10:37:42.192867 IP 192.168.30.110.80 > 41.240.84.137.1828: S
4099702870:4099702870(0) ack 3392940775 win 5840 <mss
1460,nop,nop,sackOK>
10:38:30.201125 IP 192.168.30.110.80 > 41.240.84.137.1828: S
4099702870:4099702870(0) ack 3392940775 win 5840 <mss
1460,nop,nop,sackOK>

On 11/22/06, Davin Menhinck <davin at menhinick.co.za> wrote:
> Ok thanks, I will look at the HOWTO at
> http://www.austintek.com/LVS/LVS-HOWTO/HOWTO/
>
> On 11/21/06, Joseph Mack NA3T <jmack at wm7d.net> wrote:
> > On Tue, 21 Nov 2006, Davin Menhinck wrote:
> >
> > > Hi, I am having trouble getting LVS NAT to work on my OSS 10.0. When I
> > > try to connect to my virtual webserver IP i get a timeout error.
> >
> > what do you see when using the telnet client?
> >
> > what's the output of `ipvsadm` immediately after you try to
> > connect?
> >
> > > Seems
> > > like the problem is NAT because I can get it to work fine without it.
> >
> > what's "it" and "it"?
> >
> > > I just followed this howto at
> > > http://www.howtoforge.com/high_availability_loadbalanced_apache_cluster
> > > and everthing works fine.
> >
> > what does "everything works fine" mean?
> >
> > > Unfortunately I don't have enough public IPs
> > > to spare, so I need to get NAT working.
> >
> > the realservers shouldn't have public IPs at all. The only
> > public IP needed is the VIP. (This isn't one of our HOWTOs,
> > so I don't know what's in it). Have you gone through the
> > check list for non-working LVS's in the LVS-mini-HOWTO?
> >
> > Joe
> >
> > >
> > > Software Info:
> > > Suse OSS 10.0
> > > Kernel 2.6.13
> > > Heartbeat 2.0.0
> > >
> > > Server IP info:
> > > loadb1
> > > IPaddr1 eth0 192.168.30.100/24
> > > IPaddr2 eth1 XXX.XXX.XXX.189/28
> > >
> > > loadb2
> > > IPaddr1 eth0 192.168.30.101/24
> > > IPaddr2 eth1 XXX.XXX.XXX.188/28
> > >
> > > webserver1
> > > IPaddr1 eth0 192.168.30.110/24
> > >
> > > webserver2
> > > IPaddr2 eth0 192.168.30.111/24
> > >
> > > Config files
> > > ha.cf:
> > > logfacility     local0
> > > bcast        eth0                # Linux
> > > mcast eth0 225.0.0.1 694 1 0
> > > auto_failback off
> > > node        loadb1
> > > node        loadb2
> > > respawn hacluster /usr/lib/heartbeat/ipfail
> > > apiauth ipfail gid=haclient uid=hacluster
> > >
> > > haresourses:
> > > loadb1        \
> > >       ldirectord::ldirectord.cf \
> > >       LVSSyncDaemonSwap::master \
> > >       IPaddr2::XXX.XXX.XXX.190/28/eth1 \
> > >       IPaddr2::192.168.30.105/24/eth0
> > >
> > > ldirectord.cf:
> > > checktimeout=10
> > > checkinterval=2
> > > autoreload=no
> > > logfile="local0"
> > > quiescent=yes
> > > virtual=XXX.XXX.XXX.190:80
> > >       real=192.168.30.110:80 masq
> > >       real=192.168.30.111:80 masq
> > >       fallback=127.0.0.1:80
> > >       service=http
> > >       request="ldirector.html"
> > >       receive="Test Page"
> > >       scheduler=rr
> > >       protocol=tcp
> > >       checktype=negotiate
> > >
> > > Output of tcpdump on webserver:
> > > webserver1:~ # tcpdump host 41.240.84.137
> > > tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
> > > listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
> > > 16:38:12.894836 IP 41.240.84.137.sso-control > webserver1.site.http: S
> > > 2135481172:2135481172(0) win 65535 <mss 1440,nop,nop,sackOK>
> > > 16:38:27.908046 IP webserver1.site.http > 41.240.84.137.sso-control: S
> > > 311867283:311867283(0) ack 2135481173 win 5840 <mss
> > > 1460,nop,nop,sackOK>
> > > 16:38:15.736403 IP 41.240.84.137.sso-control > webserver1.site.http: S
> > > 2135481172:2135481172(0) win 65535 <mss 1440,nop,nop,sackOK>
> > > 16:38:15.736459 IP webserver1.site.http > 41.240.84.137.sso-control: S
> > > 311867283:311867283(0) ack 2135481173 win 5840 <mss
> > > 1460,nop,nop,sackOK>
> > > 16:38:16.895205 IP webserver1.site.http > 41.240.84.137.sso-control: S
> > > 311867283:311867283(0) ack 2135481173 win 5840 <mss
> > > 1460,nop,nop,sackOK>
> > > 16:38:21.770180 IP 41.240.84.137.sso-control > webserver1.site.http: S
> > > 2135481172:2135481172(0) win 65535 <mss 1440,nop,nop,sackOK>
> > > 16:38:21.770237 IP webserver1.site.http > 41.240.84.137.sso-control: S
> > > 311867283:311867283(0) ack 2135481173 win 5840 <mss
> > > 1460,nop,nop,sackOK>
> > > 16:38:22.895586 IP webserver1.site.http > 41.240.84.137.sso-control: S
> > > 311867283:311867283(0) ack 2135481173 win 5840 <mss
> > > 1460,nop,nop,sackOK>
> > > 16:38:34.896352 IP webserver1.site.http > 41.240.84.137.sso-control: S
> > > 311867283:311867283(0) ack 2135481173 win 5840 <mss
> > > 1460,nop,nop,sackOK>
> > > 16:38:59.097893 IP webserver1.site.http > 41.240.84.137.sso-control: S
> > > 311867283:311867283(0) ack 2135481173 win 5840 <mss
> > > 1460,nop,nop,sackOK>
> > > _______________________________________________
> > > LinuxVirtualServer.org mailing list - lvs-users at LinuxVirtualServer.org
> > > Send requests to lvs-users-request at LinuxVirtualServer.org
> > > or go to http://www.in-addr.de/mailman/listinfo/lvs-users
> > >
> >
> > --
> > Joseph Mack NA3T EME(B,D), FM05lw North Carolina
> > jmack (at) wm7d (dot) net - azimuthal equidistant map
> > generator at http://www.wm7d.net/azproj.shtml
> > Homepage http://www.austintek.com/ It's GNU/Linux!
> > _______________________________________________
> > LinuxVirtualServer.org mailing list - lvs-users at LinuxVirtualServer.org
> > Send requests to lvs-users-request at LinuxVirtualServer.org
> > or go to http://www.in-addr.de/mailman/listinfo/lvs-users
> >
>
>
> --
> Menhinick Computing
> Tel. 0828744391
> Fax. 0865132814
>

--
Menhinick Computing
Tel. 0828744391
Fax. 0865132814

-- 
Menhinick Computing
Tel. 0828744391
Fax. 0865132814