lvs-dr with freebsd jailhost as realservers

[Mike Bloom]

Hi,

Joseph Mack NA3T wrote:
> On Mon, 9 Apr 2007, Mike Bloom wrote:
>
>> ipvsadm has no trouble getting to my jailhosted webservers (these two 
>> are both jailed)
>
> ipvsadm is a user interface to ip_vs(). It sets up routing tables. It 
> doesn't "get to webservers".
>
My point was that there is no issue with ip_vs being able to reach the 
webservers running on the jailhost.
>> IP Virtual Server version 1.2.1 (size=4096)
>> Prot LocalAddress:Port Scheduler Flags
>> -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
>> TCP  66.207.199.194:80 rr
>> -> 66.207.199.213:80            Route   1      0          3
>> -> 66.207.199.212:80            Route   1      0          3
>
> The InActConns usually means that your default route is not set 
> properly for the realservers.
>
> I don't know whether the bsd jails are part of the problem
> yet
>
> Joe
>

If you type in 66.207.199.213 or 66.207.199.212, you or anyone on the 
internet can reach the webservers running in the jailhost, so I suspect 
the default routes are working just fine.

If it had been a default route issue, I wouldn't have been able to 
generate traffic back to my origination ip as per the first tcpdump.

Thanks for the suggestion though.