Re: Load Balancing Issue - can someone help?
"Jeffery P. Humes" <[email protected]>
| Newsgroups | gmane.linux.highavailability.ultramonkey |
|---|---|
| Message-ID | <[email protected]> |
This line: and the realservers have to have their gateway set to the realservers IP address that is allowing masq. should read: and the realservers have to have their gateway set to the *directors *IP address that is allowing masq. Jeffery P. Humes wrote: > Ian, > > Have you setup the masquerading correctly on the director and the > realservers? > The director should have some (possibly iptables) rules that allow it > to masquerade connections for the realservers, and the realservers > have to have their gateway set to the realservers IP address that is > allowing masq. > > On the realservers: > netstat -rn (you should see an "UG" entry that points to the ip > address of the director in the gateway column) > Destination Gateway Genmask Flags MSS Window > irtt Iface > 0.0.0.0 <DIRECTORIP> 0.0.0.0 UG 0 > 0 0 eth0 > > Also check that you do not have a firewall blocking access (on any of > the servers) to the ports you are trying to use. > > -JPH > > Ian Walker wrote: >> I've tried that too, just realised the port 22 was when I was testing >> ssh!!! Doh. Sorry about that. With ftp I don't get anything at >> all, no results. The only time I've managed to get some sort of >> results on the ldirectord is when using telnet. But even that isn't >> 100% successful, as you can just see the incoming packets, and >> inactive session, nothing goes active, and no packets are sent back >> outbound. >> >> >> Ian >> >> On 09/08/06, *Glen Kendell* <[email protected] >> <mailto:[email protected]>> wrote: >> >> Ian, >> >> Try port 21. :-) >> >> - Glen >> >> >> >> On 8/9/06 5:32 AM, "Ian Walker" <[email protected] >> <mailto:[email protected]>> wrote: >> >> I checked my config, and I'm not sure why it was reporting zero >> the first time around. I now have a weight of 1 for both >> entries, shown below: >> >> IP Virtual Server version 1.0.8 (size=65536) >> Prot LocalAddress:Port Scheduler Flags >> -> RemoteAddress:Port Forward Weight ActiveConn InActConn >> TCP 172.20.12.231:22 <http://172.20.12.231:22> >> <http://172.20.12.231:22> rr >> -> 192.168.0.3:22 <http://192.168.0.3:22> >> <http://192.168.0.3:22> Masq 1 0 0 >> -> 192.168.0.2:22 <http://192.168.0.2:22> >> <http://192.168.0.2:22> Masq 1 0 0 >> >> however, I still get the same end result of no connection. I'm >> new to this, but I based my config on the sample ldirectord.cf >> <http://ldirectord.cf> <http://ldirectord.cf> file to get as far >> as I have now. >> >> Regards >> >> >> Ian >> >> >> >> On 09/08/06, *Andersson Mattias* < [email protected] >> <mailto:[email protected]> >> <mailto:[email protected]> > wrote: >> >> Hi Ian >> >> Having a look at: >> IP Virtual Server version 1.0.8 (size=65536) >> Prot LocalAddress:Port Scheduler Flags >> -> RemoteAddress:Port Forward Weight ActiveConn InActConn >> TCP 172.20.12.231:22 <http://172.20.12.231:22> >> <http://172.20.12.231:22> rr >> -> 192.168.0.3:22 <http://192.168.0.3:22> >> <http://192.168.0.3:22> Masq 0 0 0 >> -> 192.168.0.2:22 <http://192.168.0.2:22> >> <http://192.168.0.2:22> Masq 0 0 0 >> >> >> The weight 0 indicates that your connection verification is not >> working and that the real servers therefore are disabled. >> >> Have a look at your ldirectord configuration and fix this. >> >> >> /Mattias >> >> ________________________________________ >> From: [email protected] >> <mailto:[email protected]> [ >> mailto:[email protected] >> <mailto:[email protected]> ] On Behalf Of >> Ian Walker >> >> Sent: Wednesday, August 09, 2006 12:42 PM >> To: [email protected] >> <mailto:[email protected]> >> Subject: Load Balancing Issue - can someone help? >> >> Have been trying to get my config to work, using ftp but it >> doesn't seem to work on RHEL3U7. Here's my config: >> >> virtual = 172.20.12.231:22 <http://172.20.12.231:22> >> <http://172.20.12.231:22> >> real = 192.168.0.2:22 <http://192.168.0.2:22> >> <http://192.168.0.2:22> masq >> real = 192.168.0.3:22 <http://192.168.0.3:22> >> <http://192.168.0.3:22> masq >> >> service = ftp >> request = "/etc/welcome.msg" >> receive = "Welcome" >> login = "anonymous" >> passwd = "[email protected] <mailto:[email protected]>" >> scheduler = rr >> protocol = tcp >> checktype = negotiate >> >> I've validated that it's running OK using "ipvsadm -ln" and it >> shows the following results: >> >> IP Virtual Server version 1.0.8 (size=65536) >> Prot LocalAddress:Port Scheduler Flags >> -> RemoteAddress:Port Forward Weight ActiveConn InActConn >> TCP 172.20.12.231:22 <http://172.20.12.231:22> >> <http://172.20.12.231:22> rr >> -> 192.168.0.3:22 <http://192.168.0.3:22> >> <http://192.168.0.3:22> Masq 0 0 0 >> -> 192.168.0.2:22 <http://192.168.0.2:22> >> <http://192.168.0.2:22> Masq 0 0 0 >> >> >> and everytime I try to connect with FTP it fails with connection >> refused. I did change the config so that it was configured for >> telnet just to test, so my config was: >> >> >> virtual = 172.20.12.231:23 <http://172.20.12.231:23> >> <http://172.20.12.231:23> >> real = 192.168.0.2:23 <http://192.168.0.2:23> >> <http://192.168.0.2:23> masq >> real = 192.168.0.3:23 <http://192.168.0.3:23> >> <http://192.168.0.3:23> masq >> >> service = none >> request = "/etc/welcome.msg" >> receive = "Welcome" >> scheduler = rr >> protocol = tcp >> checktype = negotiate >> >> and this time when I ran the "ipvsadm -ln --connection" command, >> I got these results: >> >> IPVS connection entries >> pro expire state source virtual destination >> TCP 00:59 SYN_RECV 172.20.12.17:41271 <http://172.20.12.17:41271> >> <http://172.20.12.17:41271> 172.20.12.231:23 >> <http://172.20.12.231:23> <http://172.20.12.231:23> >> 192.168.0.2:23 <http://192.168.0.2:23> <http://192.168.0.2:23> >> >> >> so is kind of looking better. I then checked the stats to find: >> >> IP Virtual Server version 1.0.8 (size=65536) >> Prot LocalAddress:Port Conns InPkts OutPkts InBytes OutBytes >> -> RemoteAddress:Port >> TCP 172.20.12.231:23 <http://172.20.12.231:23> >> <http://172.20.12.231:23> 1 3 0 180 0 >> -> 192.168.0.2:23 <http://192.168.0.2:23> >> <http://192.168.0.2:23> 1 3 0 180 0 >> -> 192.168.0.3:23 <http://192.168.0.3:23> >> <http://192.168.0.3:23> 0 0 0 0 0 >> >> >> so I'm not entirely sure why it's not working as the connection >> just sits there trying to connect with telnet, and nothing else >> happens. I've installed the relevant packages for the ldirector >> as well as the arptables_jf package for RHEL3. >> >> The ldirector has been configured with two network cards. The >> main network being 172.20.12.231 <http://172.20.12.231> >> <http://172.20.12.231> . This ip is assigned to eth0. The other >> card, eth1 has been configured with 192.168.0.1 >> <http://192.168.0.1> <http://192.168.0.1> . >> >> The two servers running ftp have been configured with 192.168.0.2 >> <http://192.168.0.2> <http://192.168.0.2> and 192.168.0.3 >> <http://192.168.0.3> <http://192.168.0.3> . Of course, with ftp >> there was nothing, no connection or no stats, that's why I >> configured with telnet, just to see if anything would show. >> >> >> Hope I've not sent this to the wrong place, am quite interested >> in getting this working. >> >> Regards >> >> >> Ian >> >> >> -- >> Ultra Monkey - http://www.ultramonkey.org/ >> <http://www.ultramonkey.org/> >> >> To UNSUBSCRIBE, email to [email protected] >> <mailto:[email protected]>, with a body: >> unsubscribe ultramonkey-users [email protected] >> <mailto:[email protected]> >> <mailto:[email protected]> >> >> where "[email protected] >> <mailto:[email protected]>" is YOUR email address. >> >> >> >> >> >> -- >> Glen Kendell >> Martian Fireworks Security >> 206.965.8583 direct >> 206.399.3510 cell >> [email protected] <mailto:[email protected]> >> >>