Re: iptables

Eduardo-

	It is essential that you configure the lvs hosts with 2 sets of IP addresses.

>        (primary router)     |   eth0 (*.*.*.1)                         |  eth0 (*.*.*.2)        (backup router)
>                             |   eth0:1 (lvs VIP) <------------->	    |  eth0:1 (lvs VIP)
>                      |---------------------------|              |------------------------------|
>                      |     real server 1         |              |   real server 2              |
>                      |---------------------------|              |------------------------------|
>                                   | eth1 (real NAT)                           | eth1(real NAT)
>                                   | eth1:1 (lvs NAT) <--------------->        | eth1:1(lvs NAT)
>                                   ________________________
>

Is  what it should look likei logically....


There should NEVER be two like interfaces on the lvs boxes. This would cause
lots of havoc in the system, as I'm sure you've found out. Keep in mind that
there should be NO manual configuration of the eth*:1 interfaces. Essentially,
set up both boxes as regular natting firewalls, and let lvs set up the other
interfaces.
Things to look out for - The gateway on the real servers should point to
the eth1:1 address so that they route outbound correctly. Your master/backup
server IPs should use the eth* addresses of the boxes.

Hope that helps-

P





On Mon, 31 Mar 2003, Eduardo wrote:

> Hi,
>
> I´ve successfully configured the LVS using only two server, the big problem is that
> the seconde real server ( that will be used as the backup router if the primary one fails )
> can not have both eth0 ( gateway that allow connection to internet ) and the eth1
> ( gateway that allow primary router redirect request to it ) ON, I have to
> OFF the eth0.
> Does somebody know how I can maintain the eth0 ON so that when the primary
> router ( that also is one real server ) fail the backup router can handle the LVS ?
>
>
>        (primary router)     |   eth0 (on)                         |  eth0 (off)        (backup router)
>                      |---------------------------|              |------------------------------|
>                      |     real server 1    |              |   real server 2          |
>                      |---------------------------|              |------------------------------|
>                                   | eth1 (on)                           | eth1(on)
>                                   ________________________
>
> Thank you,
>
> Eduardo.
>