[lvs-users] ipsec + lvs-nat not working

Joseph Mack NA3T jmack at wm7d.net
Wed Oct 22 12:52:38 BST 2008


On Wed, 22 Oct 2008, Sebastien COUPPEY wrote:

> We can see that packets arrive back on the director, are correctly
> rewritten and sent back to the client 10.44.0.254. However the client
> never receive the packet.

I didn't look at the dump, but will take your interpretation 
of it. Is it possible for you to have problems with the 
reduced MTU of the ipsec packets. Can you fetch a small web 
page from the realserver, or run a service with small 
packets, eg telnet? If you haven't handled that already, 
lookup the sections in the HOWTO that have MTU in the 
section heading.

> I was wondering if the "brownfield" patch

don't know (but you only have one NIC?)

> or NFCT patch

don't think so

> described in the LVS-HOWTO.LVS-NAT.html documentation was 
> included in the 2.6.18 kernel. ipvsadm v1.24 2003/06/07 
> (compiled with getopt_long and IPVS v1.2.0)

Joe

-- 
Joseph Mack NA3T EME(B,D), FM05lw North Carolina
jmack (at) wm7d (dot) net - azimuthal equidistant map
generator at http://www.wm7d.net/azproj.shtml
Homepage http://www.austintek.com/ It's GNU/Linux!




More information about the lvs-users mailing list