Problems with IPVS

[Roberto Nibali]

>  Could you please look what is wrong with tcpdump2.cap and is it 
> possible to correct situation? tcpdump.cap is capture of the same 
> request/response but done with iptable -j DNAT.
>  tcpdump3.cap is wap.google.com open via LVS with Nokia phone.

Where can I find those files?

>  A bit about my setup:
>  packets comes in via GRE tunnel and arrives into interface called 
> netwap. They are marked with fwmark  iptables on mangle table. Then they 
> are marked as local using "ip rule add prio 1000 fwmark 1 table 100". 

This does not mark the packets but asks the FIB to check routing table 
100 for all packets marked with fwmark 1. Subtle but important 
difference when we try to talk about the same thing.

> And then they go through LVS and to the proxy server.

Quite a setup.

>  As another case I tried marked packets to pass via DNAT iptables 
> target. Ethereal screen does not look perfect bu sites managed to open.

What is a perfectly looking ethereal screen???

> With LVS I could not open any web site.

LVS does not open web sites.

>  Web clients are Sony Ericsson phones so I cannot upgrade all of them. :)

I own 4 of them and I would hate to fix yet another bug in their stack :).

>  Please help. I'm a bit desperate. :)

We try.

>  P.S.
> # ipvsadm -Sn
> -A -f 1 -s wlc -p 15
> -a -f 1 -r 192.168.150.27:0 -m -w 1

ipvsadm -L -n -v
ipvsadm -L -n -c

Cheers,
Roberto Nibali, ratz
-- 
echo 
'[q]sa[ln0=aln256%Pln256/snlbx]sb3135071790101768542287578439snlbxq' | dc