[lvs-users] ipvs, keepalived, squid don't work together

[Simon Horman]

On Sun, Feb 14, 2010 at 04:27:50PM +0200, Igor Velichkevich wrote:
> Hello, Lvs-users.
> 
> For balancing two ISP to local network I use keepalived, ipvs, squid and
> patch http://archive.linuxvirtualserver.org/html/lvs-users/2005-06/msg00102.html
> I adopted it for kernel 2.6.31 (may be not right).
> All settings below.
> 
> Local hosts use 192.168.100.100 as default gateway.
> But Internet works only via 192.168.100.1.

Hi,

I'm not sure that I understand your setup correctly, but I think
that what you are trying to do is transparently proxy port 80
to the local port 3128 which in turn is load balanced.

Is that correct?

If so, I suspect that the problem is that netfilter is actuing
on the PREROUTING chain but that is too late for LVS, which
effectively hangs off the INPUT chain.

I have two suggestions:

1) Use a fwmark virtual service that covers all port 80 connections or;

2) Move LVS to the PREROUTING chain
   http://archive.linuxvirtualserver.org/html/lvs-devel/2008-04/msg00026.html