[lvs-users] DR : real server unable to reach VIP

Michael Schwartzkopff ms at sys4.de
Wed May 20 11:21:38 BST 2015

Am Mittwoch, 20. Mai 2015, 12:00:01 schrieb Florent B:
> Some precisions :
> In fact packets are computed by LVS, the problem is that RS receives a
> packets with :
> - its proper eth0 IP in src, but with mac address of LVS server

"its": which IP in the source field? The source IP address should always be the 
IP address of the client. The source address should never be the IP adress of 
the real server.

MAC address of the director: That is corret.

> - VIP in dest with its eth0 mac address.

VIP in the destination field should be the VIP if you use direct routing.
Destination MAC address should ne of the real server, otherwise the packet 
would not reach the real server.

> I think packet is filtered somewhere in kernel, but I can't find which
> setting to change.

If I understand correct, the source address in the packet that the real server 
gets is the IP address of the real server. Of course this is an error. If the 
kernel recieves a packet with a soure with its own IP address it discards it.

What does change the source IP address of the packet? Do you have additional 
NAT configurured on the director?

Mit freundlichen Grüßen,

Michael Schwartzkopff

[*] sys4 AG

http://sys4.de, +49 (89) 30 90 46 64, +49 (162) 165 0044
Franziskanerstraße 15, 81669 München

Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Marc Schiffbauer
Aufsichtsratsvorsitzender: Florian Kirstein
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 230 bytes
Desc: This is a digitally signed message part.
Url : http://lists.graemef.net/pipermail/lvs-users/attachments/20150520/523a4214/attachment.bin 

More information about the lvs-users mailing list