RE: Load Balancing Issue - can someone help?
"Andersson Mattias" <[email protected]>
| Newsgroups | gmane.linux.highavailability.ultramonkey |
|---|---|
| Message-ID | <[email protected]> |
It sounds to me then that you have problems with your NAT configuration. /Mattias ________________________________ From: [email protected] [mailto:[email protected]] On Behalf Of Ian Walker Sent: Wednesday, August 09, 2006 3:36 PM To: [email protected] Subject: Re: Load Balancing Issue - can someone help? I've tried that too, just realised the port 22 was when I was testing ssh!!! Doh. Sorry about that. With ftp I don't get anything at all, no results. The only time I've managed to get some sort of results on the ldirectord is when using telnet. But even that isn't 100% successful, as you can just see the incoming packets, and inactive session, nothing goes active, and no packets are sent back outbound. Ian On 09/08/06, Glen Kendell <[email protected]> wrote: Ian, Try port 21. :-) - Glen On 8/9/06 5:32 AM, "Ian Walker" <[email protected]> wrote: I checked my config, and I'm not sure why it was reporting zero the first time around. I now have a weight of 1 for both entries, shown below: IP Virtual Server version 1.0.8 (size=65536) Prot LocalAddress:Port Scheduler Flags -> RemoteAddress:Port Forward Weight ActiveConn InActConn TCP 172.20.12.231:22 <http://172.20.12.231:22> <http://172.20.12.231:22> rr -> 192.168.0.3:22 <http://192.168.0.3:22> <http://192.168.0.3:22> Masq 1 0 0 -> 192.168.0.2:22 <http://192.168.0.2:22> <http://192.168.0.2:22> Masq 1 0 0 however, I still get the same end result of no connection. I'm new to this, but I based my config on the sample ldirectord.cf <http://ldirectord.cf> <http://ldirectord.cf> file to get as far as I have now. Regards Ian On 09/08/06, Andersson Mattias < [email protected] <mailto:[email protected]> <mailto:[email protected]> > wrote: Hi Ian Having a look at: IP Virtual Server version 1.0.8 (size=65536) Prot LocalAddress:Port Scheduler Flags -> RemoteAddress:Port Forward Weight ActiveConn InActConn TCP 172.20.12.231:22 <http://172.20.12.231:22> <http://172.20.12.231:22> rr -> 192.168.0.3:22 <http://192.168.0.3:22> <http://192.168.0.3:22> Masq 0 0 0 -> 192.168.0.2:22 <http://192.168.0.2:22> <http://192.168.0.2:22> Masq 0 0 0 The weight 0 indicates that your connection verification is not working and that the real servers therefore are disabled. Have a look at your ldirectord configuration and fix this. /Mattias ________________________________________ From: [email protected] [ mailto:[email protected] <mailto:[email protected]> <mailto:[email protected]> <mailto:[email protected]> ] On Behalf Of Ian Walker Sent: Wednesday, August 09, 2006 12:42 PM To: [email protected] Subject: Load Balancing Issue - can someone help? Have been trying to get my config to work, using ftp but it doesn't seem to work on RHEL3U7. Here's my config: virtual = 172.20.12.231:22 <http://172.20.12.231:22> <http://172.20.12.231:22> real = 192.168.0.2:22 <http://192.168.0.2:22> <http://192.168.0.2:22> masq real = 192.168.0.3:22 <http://192.168.0.3:22> <http://192.168.0.3:22> masq service = ftp request = "/etc/welcome.msg" receive = "Welcome" login = "anonymous" passwd = "[email protected]" scheduler = rr protocol = tcp checktype = negotiate I've validated that it's running OK using "ipvsadm -ln" and it shows the following results: IP Virtual Server version 1.0.8 (size=65536) Prot LocalAddress:Port Scheduler Flags -> RemoteAddress:Port Forward Weight ActiveConn InActConn TCP 172.20.12.231:22 <http://172.20.12.231:22> <http://172.20.12.231:22> rr -> 192.168.0.3:22 <http://192.168.0.3:22> <http://192.168.0.3:22> Masq 0 0 0 -> 192.168.0.2:22 <http://192.168.0.2:22> <http://192.168.0.2:22> Masq 0 0 0 and everytime I try to connect with FTP it fails with connection refused. I did change the config so that it was configured for telnet just to test, so my config was: virtual = 172.20.12.231:23 <http://172.20.12.231:23> <http://172.20.12.231:23> real = 192.168.0.2:23 <http://192.168.0.2:23> <http://192.168.0.2:23> masq real = 192.168.0.3:23 <http://192.168.0.3:23> <http://192.168.0.3:23> masq service = none request = "/etc/welcome.msg" receive = "Welcome" scheduler = rr protocol = tcp checktype = negotiate and this time when I ran the "ipvsadm -ln --connection" command, I got these results: IPVS connection entries pro expire state source virtual destination TCP 00:59 SYN_RECV 172.20.12.17:41271 <http://172.20.12.17:41271> <http://172.20.12.17:41271> 172.20.12.231:23 <http://172.20.12.231:23> <http://172.20.12.231:23> 192.168.0.2:23 <http://192.168.0.2:23> <http://192.168.0.2:23> so is kind of looking better. I then checked the stats to find: IP Virtual Server version 1.0.8 (size=65536) Prot LocalAddress:Port Conns InPkts OutPkts InBytes OutBytes -> RemoteAddress:Port TCP 172.20.12.231:23 <http://172.20.12.231:23> <http://172.20.12.231:23> 1 3 0 180 0 -> 192.168.0.2:23 <http://192.168.0.2:23> <http://192.168.0.2:23> 1 3 0 180 0 -> 192.168.0.3:23 <http://192.168.0.3:23> <http://192.168.0.3:23> 0 0 0 0 0 so I'm not entirely sure why it's not working as the connection just sits there trying to connect with telnet, and nothing else happens. I've installed the relevant packages for the ldirector as well as the arptables_jf package for RHEL3. The ldirector has been configured with two network cards. The main network being 172.20.12.231 <http://172.20.12.231> <http://172.20.12.231> . This ip is assigned to eth0. The other card, eth1 has been configured with 192.168.0.1 <http://192.168.0.1> <http://192.168.0.1> . The two servers running ftp have been configured with 192.168.0.2 <http://192.168.0.2> <http://192.168.0.2> and 192.168.0.3 <http://192.168.0.3> <http://192.168.0.3> . Of course, with ftp there was nothing, no connection or no stats, that's why I configured with telnet, just to see if anything would show. Hope I've not sent this to the wrong place, am quite interested in getting this working. Regards Ian -- Ultra Monkey - http://www.ultramonkey.org/ <http://www.ultramonkey.org/> <http://www.ultramonkey.org/> To UNSUBSCRIBE, email to [email protected], with a body: unsubscribe ultramonkey-users [email protected] <mailto:[email protected]> <mailto:[email protected]> where "[email protected]" is YOUR email address. -- Glen Kendell Martian Fireworks Security 206.965.8583 direct 206.399.3510 cell [email protected]