[lvs-users] ipvsadm is not forwarding connections

Malcolm Turnbull malcolm at loadbalancer.org
Thu Jun 19 13:11:32 BST 2014


Stephen,

Make sure that your real servers (backend servers) have the default gateway
set as the load balancer.
Do a quick couple of tests from a client on the external network (not the
internal one).
Then quickly do an :
ipvsadm -Lnc
To see if LVS is processing the connections.
Check you don't have anything firewalled etc.






On 18 June 2014 21:39, Stephen Carville <c1d62208 at opayq.com> wrote:

>
> I set up a CentOS 6.5 box to test ipvsadm. So far I have been unable to
> get it to forward connections. When I try to connect, it doesn't write
> anything in /var/log/messages to tell me what is happening. Netstat
> doesn't see anything listening on the interface IP (I read elsewhere
> that is normal) and tshark sees the incoming SYN but there is either a
> timeout or a RST.
>
> Rules right now:
>
> $ ipvsadm -L
>
> IP Virtual Server version 1.2.1 (size=4096)
> Prot LocalAddress:Port Scheduler Flags
>   -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
> TCP  10.212.160.40:4172 lc persistent 360
>   -> 10.212.170.162:4172          Route   1      0          0
>   -> 10.212.170.163:4172          Route   1      0          0
>
> IP forwarding is turned on:
>
> $ sysctl net.ipv4.ip_forward
> net.ipv4.ip_forward = 1
>
> Addresses all seem to be there.
>
> $ ip addr list eth0
> 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state UP qlen 1000
>     link/ether 00:50:56:84:64:8d brd ff:ff:ff:ff:ff:ff
>     inet 10.212.160.40/24 brd 10.212.160.255 scope global eth0
>     inet 10.212.160.43/32 brd 10.212.160.43 scope global eth0
>     inet6 fe80::250:56ff:fe84:648d/64 scope link
>        valid_lft forever preferred_lft forever
>
> $ ip addr list eth1
> 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state UP qlen 1000
>     link/ether 00:50:56:84:4c:4a brd ff:ff:ff:ff:ff:ff
>     inet 10.212.170.13/24 brd 10.212.170.255 scope global eth1
>     inet6 fe80::250:56ff:fe84:4c4a/64 scope link
>        valid_lft forever preferred_lft forever
>
> I obviously have done something wrong but damned if I can figure it out.
>
> --
> Stephen
>
> _______________________________________________
> Please read the documentation before posting - it's available at:
> http://www.linuxvirtualserver.org/
>
> LinuxVirtualServer.org mailing list - lvs-users at LinuxVirtualServer.org
> Send requests to lvs-users-request at LinuxVirtualServer.org
> or go to http://lists.graemef.net/mailman/listinfo/lvs-users
>



-- 
Regards,

Malcolm Turnbull.

Loadbalancer.org Ltd.
Phone: +44 (0)330 1604540
http://www.loadbalancer.org/


More information about the lvs-users mailing list