Re: does keepalived support tcp redundancy
hmy <[email protected]> Wed, 21 Jul 2010 13:43:26 +0800
| Newsgroups | gmane.linux.keepalived.announce |
|---|---|
| Message-ID | <[email protected]> |
--===============2034066386864586978== Content-Type: multipart/alternative; boundary=0016363ba45edf16a1048bdf47ec --0016363ba45edf16a1048bdf47ec Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable oh, that's good , thank you very much :D 2010/7/21 Adam Cantwell <[email protected]> > hmy wrote, On 7/20/2010 7:55 PM: > > hi,guys > > > > I want know is there have some way to let keeplived > > support tcp redundancy ? > > host A and B share all tcp connections information. when one them down, > > the another host handle the established tcp. the established tcp not > > disconnect . > > > > Linux can do this ? > > > > > > Keepalived can't do this. In Linux, you can use netfilter > conntrack-tools, libnfnetlink, and libnetfilter_conntrack to accomplish > the sharing of session state tables. Combined with Keepalived (for > vrrp) and iptables, I've used this method to create redundant firewall > clusters. > > I've been working on some documentation on this type of a setup, but > haven't finished it. You can take a look though at > http://www.adamcantwell.com/dokuwiki/halinuxfirewall to get pointed in > the right direction. > > Adam > > > -------------------------------------------------------------------------= ----- > This SF.net email is sponsored by Sprint > What will you do first with EVO, the first 4G phone? > Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first > _______________________________________________ > Keepalived-announce mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/keepalived-announce > --=20 =E9=BB=84=E6=98=8E=E5=8F=8B =E6=8A=80=E6=9C=AF=E9=83=A8 =E5=9B=9B=E5=B7=9D=E8=BF=85=E6=B8=B8=E7=BD=91=E7=BB=9C=E7=A7=91=E6=8A=80=E6= =9C=89=E9=99=90=E5=85=AC=E5=8F=B8 =E5=9C=B0=E5=9D=80=EF=BC=9A=E6=88=90=E9=83=BD=E5=B8=82=E5=A4=A9=E5=BA=9C=E5= =A4=A7=E9=81=93=E5=8D=97=E5=BB=B6=E7=BA=BF=E9=AB=98=E6=96=B0=E5=AD=B5=E5=8C= =96=E5=9B=AD1=E5=8F=B7=E6=A5=BCA=E5=BA=A7B-2=E9=99=841=E5=8F=B7 [email protected] =E6=89=8B=E6=9C=BA=EF=BC=9A+ 8613540630430 --0016363ba45edf16a1048bdf47ec Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable oh, that's good , thank you very much :D<br><br><div class=3D"gmail_quo= te">2010/7/21 Adam Cantwell <span dir=3D"ltr"><<a href=3D"mailto:acantwe= [email protected]">[email protected]</a>></span><br><bloc= kquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #cc= c solid;padding-left:1ex;"> hmy wrote, On 7/20/2010 7:55 PM:<br> <div><div></div><div class=3D"h5">> hi,guys<br> ><br> > =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0I want k= now is there have some way to let keeplived<br> > support tcp redundancy ?<br> > host A and B share all tcp connections information. when one them down= ,<br> > the another host handle the established tcp. the established tcp not<b= r> > disconnect .<br> ><br> > =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Linux c= an do this ?<br> ><br> ><br> <br> </div></div>Keepalived can't do this. =C2=A0In Linux, you can use netfi= lter<br> conntrack-tools, libnfnetlink, and libnetfilter_conntrack to accomplish<br> the sharing of session state tables. =C2=A0Combined with Keepalived (for<br= > vrrp) and iptables, I've used this method to create redundant firewall<= br> clusters.<br> <br> I've been working on some documentation on this type of a setup, but<br= > haven't finished it. =C2=A0You can take a look though at<br> <a href=3D"http://www.adamcantwell.com/dokuwiki/halinuxfirewall" target=3D"= _blank">http://www.adamcantwell.com/dokuwiki/halinuxfirewall</a> to get poi= nted in<br> the right direction.<br> <br> Adam<br> <br> ---------------------------------------------------------------------------= ---<br> This SF.net email is sponsored by Sprint<br> What will you do first with EVO, the first 4G phone?<br> Visit <a href=3D"http://sprint.com/first" target=3D"_blank">sprint.com/firs= t</a> -- <a href=3D"http://p.sf.net/sfu/sprint-com-first" target=3D"_blank"= >http://p.sf.net/sfu/sprint-com-first</a><br> _______________________________________________<br> Keepalived-announce mailing list<br> <a href=3D"mailto:[email protected]">Keepalived-ann= [email protected]</a><br> <a href=3D"https://lists.sourceforge.net/lists/listinfo/keepalived-announce= " target=3D"_blank">https://lists.sourceforge.net/lists/listinfo/keepalived= -announce</a><br> </blockquote></div><br><br clear=3D"all"><br>-- <br>=E9=BB=84=E6=98=8E=E5= =8F=8B<br>=E6=8A=80=E6=9C=AF=E9=83=A8<br>=E5=9B=9B=E5=B7=9D=E8=BF=85=E6=B8= =B8=E7=BD=91=E7=BB=9C=E7=A7=91=E6=8A=80=E6=9C=89=E9=99=90=E5=85=AC=E5=8F=B8= <br>=E5=9C=B0=E5=9D=80=EF=BC=9A=E6=88=90=E9=83=BD=E5=B8=82=E5=A4=A9=E5=BA= =9C=E5=A4=A7=E9=81=93=E5=8D=97=E5=BB=B6=E7=BA=BF=E9=AB=98=E6=96=B0=E5=AD=B5= =E5=8C=96=E5=9B=AD1=E5=8F=B7=E6=A5=BCA=E5=BA=A7B-2=E9=99=841=E5=8F=B7<br>= =E9=82=AE=E7=AE=B1=EF=BC=9A<a href=3D"mailto:[email protected]">huang= [email protected]</a><br>=E6=89=8B=E6=9C=BA=EF=BC=9A+ 8613540630430<br><br= > --0016363ba45edf16a1048bdf47ec-- --===============2034066386864586978== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline ------------------------------------------------------------------------------ This SF.net email is sponsored by Sprint What will you do first with EVO, the first 4G phone? Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first --===============2034066386864586978== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Keepalived-announce mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/keepalived-announce --===============2034066386864586978==--