Re: Load Balancing Issue - can someone help?
"Jeffery P. Humes" <[email protected]>
| Newsgroups | gmane.linux.highavailability.ultramonkey |
|---|---|
| Message-ID | <[email protected]> |
Ian, Have you setup the masquerading correctly on the director and the realservers? The director should have some (possibly iptables) rules that allow it to masquerade connections for the realservers, and the realservers have to have their gateway set to the realservers IP address that is allowing masq. On the realservers: netstat -rn (you should see an "UG" entry that points to the ip address of the director in the gateway column) Destination Gateway Genmask Flags MSS Window irtt Iface 0.0.0.0 <DIRECTORIP> 0.0.0.0 UG 0 0 0 eth0 Also check that you do not have a firewall blocking access (on any of the servers) to the ports you are trying to use. -JPH Ian Walker wrote: > I've tried that too, just realised the port 22 was when I was testing > ssh!!! Doh. Sorry about that. With ftp I don't get anything at all, > no results. The only time I've managed to get some sort of results on > the ldirectord is when using telnet. But even that isn't 100% > successful, as you can just see the incoming packets, and inactive > session, nothing goes active, and no packets are sent back outbound. > > > Ian > > On 09/08/06, *Glen Kendell* <[email protected] > <mailto:[email protected]>> wrote: > > Ian, > > Try port 21. :-) > > - Glen > > > > On 8/9/06 5:32 AM, "Ian Walker" <[email protected] > <mailto:[email protected]>> wrote: > > I checked my config, and I'm not sure why it was reporting zero > the first time around. I now have a weight of 1 for both entries, > shown below: > > IP Virtual Server version 1.0.8 (size=65536) > Prot LocalAddress:Port Scheduler Flags > -> RemoteAddress:Port Forward Weight ActiveConn InActConn > TCP 172.20.12.231:22 <http://172.20.12.231:22> > <http://172.20.12.231:22> rr > -> 192.168.0.3:22 <http://192.168.0.3:22> > <http://192.168.0.3:22> Masq 1 0 0 > -> 192.168.0.2:22 <http://192.168.0.2:22> > <http://192.168.0.2:22> Masq 1 0 0 > > however, I still get the same end result of no connection. I'm > new to this, but I based my config on the sample ldirectord.cf > <http://ldirectord.cf> <http://ldirectord.cf> file to get as far > as I have now. > > Regards > > > Ian > > > > On 09/08/06, *Andersson Mattias* < [email protected] > <mailto:[email protected]> > <mailto:[email protected]> > wrote: > > Hi Ian > > Having a look at: > IP Virtual Server version 1.0.8 (size=65536) > Prot LocalAddress:Port Scheduler Flags > -> RemoteAddress:Port Forward Weight ActiveConn InActConn > TCP 172.20.12.231:22 <http://172.20.12.231:22> > <http://172.20.12.231:22> rr > -> 192.168.0.3:22 <http://192.168.0.3:22> > <http://192.168.0.3:22> Masq 0 0 0 > -> 192.168.0.2:22 <http://192.168.0.2:22> > <http://192.168.0.2:22> Masq 0 0 0 > > > The weight 0 indicates that your connection verification is not > working and that the real servers therefore are disabled. > > Have a look at your ldirectord configuration and fix this. > > > /Mattias > > ________________________________________ > From: [email protected] > <mailto:[email protected]> [ > mailto:[email protected] > <mailto:[email protected]> ] On Behalf Of > Ian Walker > > Sent: Wednesday, August 09, 2006 12:42 PM > To: [email protected] > <mailto:[email protected]> > Subject: Load Balancing Issue - can someone help? > > Have been trying to get my config to work, using ftp but it > doesn't seem to work on RHEL3U7. Here's my config: > > virtual = 172.20.12.231:22 <http://172.20.12.231:22> > <http://172.20.12.231:22> > real = 192.168.0.2:22 <http://192.168.0.2:22> > <http://192.168.0.2:22> masq > real = 192.168.0.3:22 <http://192.168.0.3:22> > <http://192.168.0.3:22> masq > > service = ftp > request = "/etc/welcome.msg" > receive = "Welcome" > login = "anonymous" > passwd = "[email protected] <mailto:[email protected]>" > scheduler = rr > protocol = tcp > checktype = negotiate > > I've validated that it's running OK using "ipvsadm -ln" and it > shows the following results: > > IP Virtual Server version 1.0.8 (size=65536) > Prot LocalAddress:Port Scheduler Flags > -> RemoteAddress:Port Forward Weight ActiveConn InActConn > TCP 172.20.12.231:22 <http://172.20.12.231:22> > <http://172.20.12.231:22> rr > -> 192.168.0.3:22 <http://192.168.0.3:22> <http://192.168.0.3:22> > Masq 0 0 0 > -> 192.168.0.2:22 <http://192.168.0.2:22> <http://192.168.0.2:22> > Masq 0 0 0 > > > and everytime I try to connect with FTP it fails with connection > refused. I did change the config so that it was configured for > telnet just to test, so my config was: > > > virtual = 172.20.12.231:23 <http://172.20.12.231:23> > <http://172.20.12.231:23> > real = 192.168.0.2:23 <http://192.168.0.2:23> > <http://192.168.0.2:23> masq > real = 192.168.0.3:23 <http://192.168.0.3:23> > <http://192.168.0.3:23> masq > > service = none > request = "/etc/welcome.msg" > receive = "Welcome" > scheduler = rr > protocol = tcp > checktype = negotiate > > and this time when I ran the "ipvsadm -ln --connection" command, I > got these results: > > IPVS connection entries > pro expire state source virtual destination > TCP 00:59 SYN_RECV 172.20.12.17:41271 <http://172.20.12.17:41271> > <http://172.20.12.17:41271> 172.20.12.231:23 > <http://172.20.12.231:23> <http://172.20.12.231:23> > 192.168.0.2:23 <http://192.168.0.2:23> <http://192.168.0.2:23> > > > so is kind of looking better. I then checked the stats to find: > > IP Virtual Server version 1.0.8 (size=65536) > Prot LocalAddress:Port Conns InPkts OutPkts InBytes OutBytes > -> RemoteAddress:Port > TCP 172.20.12.231:23 <http://172.20.12.231:23> > <http://172.20.12.231:23> 1 3 0 180 0 > -> 192.168.0.2:23 <http://192.168.0.2:23> <http://192.168.0.2:23> > 1 3 0 180 0 > -> 192.168.0.3:23 <http://192.168.0.3:23> <http://192.168.0.3:23> > 0 0 0 0 0 > > > so I'm not entirely sure why it's not working as the connection > just sits there trying to connect with telnet, and nothing else > happens. I've installed the relevant packages for the ldirector as > well as the arptables_jf package for RHEL3. > > The ldirector has been configured with two network cards. The main > network being 172.20.12.231 <http://172.20.12.231> > <http://172.20.12.231> . This ip is assigned to eth0. The other > card, eth1 has been configured with 192.168.0.1 > <http://192.168.0.1> <http://192.168.0.1> . > > The two servers running ftp have been configured with 192.168.0.2 > <http://192.168.0.2> <http://192.168.0.2> and 192.168.0.3 > <http://192.168.0.3> <http://192.168.0.3> . Of course, with ftp > there was nothing, no connection or no stats, that's why I > configured with telnet, just to see if anything would show. > > > Hope I've not sent this to the wrong place, am quite interested in > getting this working. > > Regards > > > Ian > > > -- > Ultra Monkey - http://www.ultramonkey.org/ > <http://www.ultramonkey.org/> > > To UNSUBSCRIBE, email to [email protected] > <mailto:[email protected]>, with a body: > unsubscribe ultramonkey-users [email protected] > <mailto:[email protected]> > <mailto:[email protected]> > > where "[email protected] > <mailto:[email protected]>" is YOUR email address. > > > > > > -- > Glen Kendell > Martian Fireworks Security > 206.965.8583 direct > 206.399.3510 cell > [email protected] <mailto:[email protected]> > >