[lvs-users] IPVS, linux containers, virtual bridge

Tomas Carnecky tomas.carnecky at gmail.com
Thu Oct 4 12:42:33 BST 2012

I have a single physical machine, the real servers are running inside linux
containers, connected to a virtual bridge (br0), and are assigned 10.0.0.x IP
addresses. I use IPVS to seamlessly deploy new versions of my software: create
new container, start the application inside it. add the IP address as a real
real server, remove the old real server and destroy the container.

This works well. Except when I try to connect from one container to another
through the VIP. Let's assume the following setup:

    VIP:        5.9.x.y

    VIP port 9999 has assigned one real server, container1 (, using

When I try to connect from container2 ( to 5.9.x.y:9999 (which should
forward the packets to container1) it does not work. The connection times out.
When I use tcpdump on the br0 device I see two packets: -> 5.9.x.y ->

The second one I assume is after IPVS has rewritten the destination. However,
no reply is ever sent back to What am I missing?


More information about the lvs-users mailing list