Re: Virtual server not serving?

First, I need to point out that RedHat 7.3 is not really the best choice for 
this.  You'd be much better off with Red Hat Advanced Server (and you'd be able 
to get support for setting this up if you purchased two entitlements for it).

That being said, here is some advise:

ipvsadm does not LISTEN, it is a routing mechanism.  Packets are delivered to 
the real servers unmodified (except for NAT if it is in use).  The only 
listening going on is on the real servers.

I suspect either:

1) You don't have the routing right on your real servers (you need to set their 
default gateway to be the floating nat_router address).

2) You have one of the network cards that don't work with ipvsadm.


Volker Kindermann wrote:
> Hello,
> 
> 
> I have a problem with a virtual server and have to solve it till monday
> afternoon.
> 
> I'm trying to set up a virtual server (two load-balancers and two
> realserver) to balance http-requests to the real servers. I'm using
> redhat 7.3 with the latest errata and the ipvsadm tool from redhat 8.0
> and the piranha packet from advanced server.
> 
> Failover between the load-balancers works well as fas as the network
> interfaces are concerned.
> 
> The big problem is, that the load balancers won't open any listener on
> the virtual server's ip port 80 (that's the service I want to provide).
> 
> There are one lvs process, two nanny processes, a pulse process and the
> piranha-gui process.
> 
> I can ping the virtual ip and the real-servers from outside, so the
> routing should be fine (traceroute from outside to the real servers is
> possible).
> 
> I can reach each realserver's port 80 from the loadbalancers.
> 
> But I couldn't connect to the virtual server's ip port 80 from outside.
> 
> It would be great if someone could give me a hint whats wrong. 
> 
> Here is the system info:
> 
> # cat /etc/sysconfig/ha/lvs.cf
> 
> serial_no = 57
> primary = 192.168.100.1
> primary_private = 192.168.0.1
> service = lvs
> backup_active = 1
> backup = 192.168.100.2
> backup_private = 192.168.0.2
> heartbeat = 1
> heartbeat_port = 539
> keepalive = 6
> deadtime = 18
> network = nat
> nat_router = 10.0.0.100 eth0:1
> nat_nmask = 255.255.255.0
> reservation_conflict_action = preempt
> #debug_level = NONE
> debug_level = 7
> rsh_command = ssh
> virtual Webservice {
>      active = 1
>      address = 192.168.100.100 eth2:1
>      vip_nmask = 255.255.255.0
>      port = 80
>      persistent = 360
>      send = "GET / HTTP/1.0\r\n\r\n"
>      expect = "HTTP"
>      load_monitor = uptime
>      scheduler = wlc
>      protocol = tcp
>      timeout = 6
>      reentry = 15
>      quiesce_server = 0
>      server unten {
>          address = 10.0.0.10
>          active = 1
>          weight = 1
>      }
>      server oben {
>          address = 10.0.0.20
>          active = 1
>          weight = 1
>      }
> }
> 
> 
> 
> # ifconfig
> 
> eth0      Link encap:Ethernet  HWaddr 00:01:02:41:61:AD  
>           inet addr:10.0.0.1  Bcast:10.0.0.255  Mask:255.255.255.0
>           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>           RX packets:2625 errors:0 dropped:0 overruns:0 frame:0
>           TX packets:3166 errors:0 dropped:0 overruns:0 carrier:0
>           collisions:144 txqueuelen:100 
>           RX bytes:907120 (885.8 Kb)  TX bytes:339000 (331.0 Kb)
>           Interrupt:10 Base address:0x3800 
> 
> eth0:1    Link encap:Ethernet  HWaddr 00:01:02:41:61:AD  
>           inet addr:10.0.0.100  Bcast:10.0.0.255  Mask:255.255.255.0
>           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>           Interrupt:10 Base address:0x3800 
> 
> eth1      Link encap:Ethernet  HWaddr 00:E0:29:2E:77:6A  
>           inet addr:192.168.0.1  Bcast:192.168.0.255  Mask:255.255.255.0
>           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>           RX packets:64 errors:0 dropped:0 overruns:0 frame:0
>           TX packets:68 errors:0 dropped:0 overruns:0 carrier:0
>           collisions:0 txqueuelen:100 
>           RX bytes:4484 (4.3 Kb)  TX bytes:4080 (3.9 Kb)
>           Interrupt:5 Base address:0x3400 
> 
> eth2      Link encap:Ethernet  HWaddr 00:E0:29:30:B0:1C  
>           inet addr:192.168.100.1  Bcast:192.168.100.255 
> Mask:255.255.255.0          UP BROADCAST RUNNING MULTICAST  MTU:1500 
> Metric:1          RX packets:63 errors:0 dropped:0 overruns:0 frame:0
>           TX packets:72 errors:0 dropped:0 overruns:0 carrier:0
>           collisions:0 txqueuelen:100 
>           RX bytes:4424 (4.3 Kb)  TX bytes:4320 (4.2 Kb)
>           Interrupt:9 Base address:0x3c00 
> 
> eth2:1    Link encap:Ethernet  HWaddr 00:E0:29:30:B0:1C  
>           inet addr:192.168.100.100  Bcast:192.168.100.255 
> Mask:255.255.255.0          UP BROADCAST RUNNING MULTICAST  MTU:1500 
> Metric:1          Interrupt:9 Base address:0x3c00 
> 
> lo        Link encap:Local Loopback  
>           inet addr:127.0.0.1  Mask:255.0.0.0
>           UP LOOPBACK RUNNING  MTU:16436  Metric:1
>           RX packets:0 errors:0 dropped:0 overruns:0 frame:0
>           TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
>           collisions:0 txqueuelen:0 
>           RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)
> 
> 
> # route -n
> 
> Kernel IP routing table
> Destination     Gateway         Genmask         Flags Metric Ref    Use
> Iface 192.168.100.0   0.0.0.0         255.255.255.0   U     0      0    
>    0 eth2 10.0.0.0        0.0.0.0         255.255.255.0   U     0      0
>        0 eth0 192.168.0.0     0.0.0.0         255.255.255.0   U     0   
>   0        0 eth1 127.0.0.0       0.0.0.0         255.0.0.0       U    
> 0      0        0 lo
> 
> 
> # ipvsadm -L
> 
> IP Virtual Server version 1.0.4 (size=65536)
> Prot LocalAddress:Port Scheduler Flags
>   -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
> TCP  192.168.100.100:http wlc persistent 360
>   -> oben.testdomain.de:http      Masq    1      0          0         
>   -> unten.testdomain.de:http     Masq    1      0          0         
> 
> 
> # iptables -L -v
> 
> Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
>  pkts bytes target     prot opt in     out     source              
> destination         
> 
> Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
>  pkts bytes target     prot opt in     out     source              
> destination         
> 
> Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
>  pkts bytes target     prot opt in     out     source              
> destination         
> 
> # iptables -t nat -L -v
> 
> Chain PREROUTING (policy ACCEPT 3 packets, 210 bytes)
>  pkts bytes target     prot opt in     out     source              
> destination         
> 
> Chain POSTROUTING (policy ACCEPT 4 packets, 205 bytes)
>  pkts bytes target     prot opt in     out     source              
> destination           798 56088 MASQUERADE  all  --  any    any    
> 10.0.0.0/24          anywhere           
> 
> Chain OUTPUT (policy ACCEPT 802 packets, 56293 bytes)
>  pkts bytes target     prot opt in     out     source              
> destination         
> 
> 
> # uname -a
> 
> Linux lbunten 2.4.18-17.7.xcustom #2 Fri Nov 1 08:21:49 CET 2002 i686
> unknown
> 
> 
> # rpm -q piranha
> 
> piranha-0.7.0-3
> 
> 
> # rpm -q ipvsadm
> 
> ipvsadm-1.21-4
> 
> 
> 
> Thank you very much for any hint. As I said above, monday there will be
> the decision if this project is done with redhat.
> 
> Please help
> Thanks
> Volker
> 
> 
> 
> _______________________________________________
> Piranha-list mailing list
> [email protected]
> https://listman.redhat.com/mailman/listinfo/piranha-list