lvs-tun

[Joseph Mack NA3T]

On Tue, 1 May 2007, Sameer Garg wrote:

> Hi All,
>
> I am setting up load balancing using LVS/Tun. I have a director which
> balances traffic betwen two real servers.
>                |-----------------------------------|
>                |                  LVS_IP                 |
>                |_______________________ |
>                           /                       \
>           || Real Server 1 ||             || Real Server 2 ||
>
> In this setup only one of the Real Servers can service SSL request(
> assuming RS#1 here). When I go to http://LVS_IP the load balancer
> works fine. But when I try https://LVS_IP there is no response.

https I think needs to go to the name in the certificate 
(and not the IP).

> The real servers have the following options for 
> arp_ignore=1 and arp_announce=2.

if it's OK for http, then the packets will do the right 
thing for https.

> Beside the SSL problem I would also like to know how do 
> you determine what value of netmask to use in 
> ldirectord.cf.

the VIP is /32

Joe
--
Joseph Mack NA3T EME(B,D), FM05lw North Carolina
jmack (at) wm7d (dot) net - azimuthal equidistant map
generator at http://www.wm7d.net/azproj.shtml 
Homepage http://www.austintek.com/ It's GNU/Linux!